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We present a protocol for performing state merging when multiple parties share a sin- 
gle copy of a mixed state, and analyze the entanglement cost in terms of min- and max- 
entropies. Our protocol allows for interpolation between corner points of the rate region 
without the need for time-sharing, a primitive which is not available in the one-shot set- 
■ ting. We also compare our protocol to the more naive strategy of repeatedly applying a 

, single-party merging protocol one party at a time, by performing a detailed analysis of the 

rates required to merge variants of the embezzling states. Finally we analyze a variation 
q , of multiparty merging, which we call split-transfer, by considering two receivers and many 

additional helpers sharing a mixed state. We give a protocol for performing a split-transfer 
and apply it to the problem of assisted entanglement distillation. 

ON 

I. INTRODUCTION 

An important part of quantum information theory is concerned with the design and analy- 
sis of quantum communication protocols. The subject has flourished over the past two decades, 
with early discoveries like teleportation (l]] and superdense coding |Q] laying the groundwork 
for a series of major advances over the last five years. (See, for example, p-rlOT).) Another early 
result, Schumacher compression fllll] , studies the amount of quantum communication required 
to transmit to another location a sequence of quantum states \ipi')\tp2)\'4't) ■ ■ ■ emitted by a sta- 
tistical source. If we assume the states coming from the source are independent and identically 
distributed (i.e an i.i.d source), we get the quantum analogue of Shannon compression, and the 
optimal rate of compression is given by the von Neumann entropy S(p) of the density matrix 
p = YljPj^j associated with the source jllll . This gives an informational meaning to the von 
Neumann entropy, whose original definition was motivated by the desire to extend the Gibbs 
entropy, a thermodynamical concept, to the quantum setting. Schumacher compression is often 
used in more complex protocols as a preliminary preprocessing step. 

i ' 

Other information theoretic quantities, such as the conditional von Neumann entropy S(A\B)^ 
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|12|] and the conditional mutual information I (A : B\R)^ [7], were only more recently given 
meanmg If we consider an i.i.d. source S emitting an unknown sequence of states 

\ipi B )\ip2 B ) ■ ■ ■ \^n B )> distributed to two spatially separated parties A (Alice) and B (Bob), an 
interpretation of S(A\B)^ can be obtained |j,ll3fl as the optimal rate at which pure entangle- 
ment needs to be consumed in order to transfer the entire sequence to Bob's location. When- 
ever S(A\B)ip is negative, it is understood that entanglement is gained instead of consumed and 
that the transfer can be accomplished using only local operations and classical communication 
(LOCC). The first protocol flEj] for achieving this task, also known as state merging, was based 
on a random measurement strategy, a popular approach when designing quantum communica- 
tion protocols. Examples of other tasks that can be achieved using this approach are distributed 
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compression fl3l and assisted distillation flBl - In assisted distillation, m helpers Cx, C2, . . . , C m 
and two recipients A and 5 share a multipartite pure state ipC^—CmAB ^ anc j OD j ec tive i s to 
extract an optimal amount of pure entanglement between A and B by using LOCC operations 
and classical information broadcasted by the m helpers Cx, C2, . . . , C m . 

Both distributed compression and assisted distillation involve multiple parties (i.e more than 
two) sharing a multipartite state ip. In the case of distributed compression, we can use the state 
merging primitive to perform compression at an optimal rate by transferring each sender's share 
one at a time This strategy will work for any rate which is a corner point of the boundary of 
the rate region associated with distributed compression. To achieve compression at rates which 
are not corner points, however, we need to use a time-sharing strategy as the decoding operation 
performed by the receiver can only recover the shares one at a time. One contribution of this 
paper is to present a protocol for the more general task of multiparty state merging which will 
eliminate the need for time-sharing. That is, we consider m senders C% , C2 , . . . , C m and a decoder 
B sharing a multipartite mixed state ^d^—CmB^ potentially with additional entanglement in the 
form of EPR pairs (ebits) distributed between the decoder and each of the m senders. Given many 
copies of the input state ij } G\G^...C m B ^ ^ e ^ as ^ j s j. transfer the shares Cx, C2, . . . , C m to the receiver 
B with high fidelity using only LOCC operations. 

If only a single copy of the state ip c i c 2-C m B ^ g ava ii a ble to the parties, we can use our proto- 
col to achieve merging within an error tolerance e if we distribute enough initial entanglement 
between each of the senders and the receiver. In this regime, a more naive strategy consisting of 
repeatedly applying a one-shot state merging protocol [16] on one sender at a time will generally 
require more initial entanglement to perform the state transfer than does our protocol. In addi- 
tion, this strategy only yields a handful of achievable combinations of entanglement costs and 
does not permit interpolating between them. A full characterization of the entanglement cost in 
the one-shot regime when m = 1 was performed by 1 16] using smooth min- and max-entropies. 
By applying the random measurement strategy of [J] and by using the min- and max-entropy 
formalism of JitI i, we generalize some of the results of fl6ll to the multipartite case (m > 2). This 
work complements other recent attempts to study quantum information theory in the one-shot 
setting (MS]- 

To perform assisted distillation in the context of multiple parties, we introduce a second de- 
coder, whom we label A (Alice), and consider a variation of multiparty merging. Given a partition 
of the helpers Cx, C2 ■ ■ ■ , C m into a set T and its complement T := {C1C2 . . . C m }\T, we want to 
transfer the shares T and T to the locations of the decoders A and B respectively. We call this task 
a split-transfer of the state ^p\Ci...c m B _ ^ protocol for performing a split-transfer can be obtained 
by using the random measurement strategy on Cx, C2, ■ ■ • , C m , followed by appropriate decod- 
ings Ua and Vb by the decoders A and B. The optimal achievable rate for assisted distillation was 
found in by using a recursive argument. By using a split-transfer protocol, we give a simpler 
demonstration which does not rely on a recursive argument. 

Structure of the paper: In Section HH we introduce the definition for multiparty merging of 
a state ^ c i c 2---C m BR anc j review the known results for the i.i.d setting. In Section Hill we formu- 
late a condition that a set of instruments performed by the senders Cx , C%, . . . , C m must satisfy in 
order to accomplish merging within a fixed error tolerance. In Section HVl we consider random 
measurements performed by the senders Cx , C2, ■ ■ ■ , C m and prove an upper bound to the quan- 
tum error when a single copy of the input state is available. We analyze the asymptotic setting 
in Section [V] recovering the main theorem of Section [II] without the need for time-sharing. In 
Section IVH we reformulate the bounds obtained in Section [TTT] in terms of min-entropies and give 
necessary and sufficient conditions for merging in the one-shot regime. Sectior fvTII is devoted to 
analyzing the rates achievable for variants of the embezzling states, comparing our protocol to a 
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strategy of merging the shares one at a time. We introduce a split-transfer of the state <^p^ c ^— °™- B 
in Section IVIIII and show the existence of a protocol for performing this task. We use this pro- 
tocol to recover the optimal distillation rate for the problem of assisted distillation. Appendices, 
containing relevant folklore material, appear at the end. 

Notation: In this paper, we restrict our attention to finite dimensional Hilbert spaces. Quantum 
systems under consideration will be denoted A,B,..., and are freely associated with their Hilbert 
spaces, whose (finite) dimensions are denoted d^ds, etc... If A and B are two Hilbert spaces, 
we write AB = A ® B for their tensor product and write A n for the tensor product ®" =1 A. 
If we have m Hilbert spaces A±, A2, ■ ■ ■ , A m , we write Am for the tensor product ®™ 1 A{. An 
ancilla augmenting the system Ai is denoted as A®. We write A° M for the tensor product ®™ 1 A® 
of m ancillas A®, A®, • • • >-^m- The maximally entangled state -7= J2k=\\k)\k) °f Schmidt rank 

Y n 2 

Ki is denoted as \$ Ki ). We write <& K for the density operator \$ Kl )($ Kl \ <g) \§ K2 )($ K2 \ ® . . . ® 
\§ K ™\j (§K m y space of linear operators acting on the Hilbert space A is denoted by C{A). The 
identity operator acting on A is denoted by I . The symbol icU denotes the identity map acting 
on C(A). Unless otherwise stated, a "state" can be either pure or mixed. The symbol for such a 
state (such as ip and p) also denotes its density operator. The density operator of a pure 

state will frequently be written as ip. We denote by T4 the maximally mixed state of dimension 
dj{. We write S(A)^ = — Tr(ip A \ogip A ) to denote the von Neumann entropy of a density matrix 
ip A for the system A. The function F(p, a) := Try/ p 1 / 2 ap 1 / 2 is the fidelity [23] between the two 
states p and a. The trace norm of an operator, \\X\\i is defined to be Tr|X| = TrV X^X. We will 
use the terms "receiver" and "decoder" interchangeably throughout the following sections. 



II. DEFINITIONS AND MAIN RESULT 



For a bipartite state p , the operation known as quantum state merging can be viewed in two 
different ways. The original formulation of the problem [4] was in terms of a statistical source 
emitting (unknown) states \ip AB ), \ip AB ), . . . , with average density operator p AB assumed to be 
known by the parties. The objective was then to transfer the entire sequence to the location of 
the decoder (Bob) using as little quantum communication as possible. An equivalent view of the 
problem is to consider a purification ip ABR of the density matrix p AB , and regard the process of 
merging as that of transferring all the correlations between Alice's share and the purification sys- 
tem R to the location of the decoder B. This means decoupling Alice's system from the reference 
R, while leaving the state ifi intact (up to some arbitrarily small perturbation) in the process. The 
receiver will hold a purification (j) BR of the system R, and since all purifications are equivalent up 
to an isometry on the purification system, he can recover the original state tp ABR by applying an 
appropriate isometry to <f) BR . Additional entanglement between Alice and Bob might be distilled 
in the process. 

To analyze the multipartite scenario, where m senders and a decoder / receiver share a state 
ri pC 1 c 2 -CmBR ^ p Ur ifying system R, we adopt the second view and look at the transformations 
that can be performed by the senders on their shares to allow the receiver to recover the purified 
state i[} C i- c 2---CmBR w i t ] 1 high fidelity. The resources at their disposal will be pure entanglement, 
in the form of maximally entangled states shared between each of the senders C\ , C% , . . . , C m and 
the receiver Bob, and noiseless classical channels, which will be used to transmit measurement 
outcomes to the receiver. Any transformation applied by the senders will need to decouple the 
reference R from the senders' shares Ci, C2, . . . , C m and leave the reference unchanged. Other- 
wise, the receiver might hold a purification that cannot be taken, by means of an isometry, to 
the original state. If each of the senders C\, C2, . . . , C m perform an incomplete measurement, de- 
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FIG. 1: Picture of the initial and final steps of a multiparty state merging protocol. 



scribed by Kraus operators P{ mapping C{ to a subspace C\, we would want each outcome state 
i/jj 1 2 " ' m to have a product form 

C 1 C 1 c 1 

where J = (ji , j'2, . . . , j m ) are the measurement outcomes. The states 1 2 m } could be entan- 
gled and / or contain classical correlations between some of the subsystems C\ , C\ , . . . , C} n . In this 
paper, we will primarily be concerned with extracting pure bipartite entanglement, in the form 
of maximally entangled states -7= ^=1 \k)\k) shared between the senders and the decoder, and 
thus, we will further impose that the operations applied by the senders destroy all correlations 
existing with the other senders' shares. That is, we want 

where t c ^ is the maximally mixed state of dimension Lj on the subspace C\. With this assumption 
in mind, we can give a definition of a multiparty state merging for a state ^C\Ci...c m BR _ 

Let A™ : C M C M <8> BB^ C l M (g) B l M BB M be an LOCC quantum operation performed by 
the senders Ci, C2, . . . , C m and the decoder B. Initially, each sender C{ is given an ancilla C®. 
The receiver also has ancillas B M := B^B® ■ ■ ■ B^, with d B o = d c o, and B M := -B^-E^ • • • 
with d B i = d c i . Before the map A™ is applied, the systems C M and B Q M will hold maximally 

entangled states & Kl <g) § K2 ® . . . g) <I> Xm , where Q Ki has Schmidt rank if, = d c o and is shared 
between the sender C, and the receiver i?. After the map A™ is applied, the senders share a 
subsystem := C\ C\ . . . C^ of Cm, and the receiver holds three systems: B, B\j and Bm, with 
Bm being an ancillary system of dimension of the same size as the system Cm- 

This operation will implement merging, as illustrated in Figure [TJ if the output state of the 
map idji eg) A™ is approximately a tensor product of the initial state ip c 'i c 2-C m BR anc j max imally 
entangled states <£ L := Q Ll Cg) & L2 Cg) . . . eg) <J> Lm shared between the senders and the decoder. Each 
<J> L * is a maximally entangled state of Schmidt rank Lj on the tensor space C\B\. More formally, 
we have 

Definition 1 (m-Party State Merging) Let A™ be defined as in the previous paragraphs. We say that 
-party state merging protocol for the state ^p^-C^BR w ^ enor e m ^ en t an gi emen t cost 
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E := (log K\ - log Li, log K 2 - log L 2 , . . . , log K m - log L m ) if 



< e, (3) 



i 



where the state ifj B M BR corresponds to the initial state ^ c ^ c 2---C m BR w ^ ^ S y S t em g M substituted for 
Cm- if we are given n copies of the same state, tp = (a)® n , the entanglement rate R(a) is defined as 
1(a) 

Before stating the main theorem, we need to define what it means for a rate-tuple R to be 
achievable for multiparty merging using LOCC operations. 

Definition 2 (The Rate Region) We say that the rate-tuple 1, := (R\,R 2 , . . . , R m ) is achievable for 
multiparty merging of the state ^p\Ci...c m B if for all e > 0, we can find an N(e) such that for every 
n > N(e) there exists an m-party state merging protocol A™ acting on ip® n ® <& Rn , with error e and 
entanglement rate R^ := ^(log K% - log L™, log K% - log 1%, ■ ■ ■ , log K% - log LJJJ approaching R. 
We call the closure of the set of achievable rate-tuples the rate region. 

Suppose m systems Ci,C 2 , ■ ■ ■ , C m in the state ^dCa.-.C™^ w ] iere j% j s a purifying system, 
are distributed to m senders, spatially separated from each other. To recover the purified state 
ip c i c 2—C m R at j-j-jg receiver's end, a task called distributed compression, the senders need an 
enough supply of initial entanglement. It was shown in [4] that the rate region associated with 
distributed compression is characterized by the inequalities 

^2 R > S(T\T)^ for all nonempty sets T C {1, 2, . . . , m}. (4) 

Here, the symbol T also denotes the tensor product space T := <S> ie fCi associated with the 
set T. The set T is defined as {1, 2, ... , m}\T and the tensor product space T as ®ier Ci- If a 
rate- tuple (Ri,R 2 , . . . , R m ) is achievable for distributed compression and some of the rates R are 
negative, then the senders Q will be able to transfer their shares to the receiver using only LOCC 
operations, and furthermore, they will gain a potential for future communication in the form of 
maximally entangled states. Allowing the receiver to have side information B as well, leads to 
a similar set of equations describing the rate region associated with the task of multiparty state 
merging. 

Theorem 3 (m-Party Quantum State Merging [4D) Let ip c i c 2-C m BR ^ £ a ^ me s /j flm f between 
m senders Ci, C 2 , . . . , C m and a receiver Bob, with purifying system R. Then, the rate 1 := 
(Ri,R 2 , . . . , R m ) is achievable for multiparty merging iff the inequality 

^Ri > S{T\TB)ip (5) 

ieT 

holds for all non empty subsets T C {1, 2, m}. 

The theorem was proved in |Q] by showing that the corner points of the region are achievable 
and then using time-sharing to interpolate between them. In addition to recovering the result 
without time-sharing, we will extend it to the one-shot setting. Time-sharing, which consists of 
partitioning a large supply of states and applying different protocols to each subset, is impossible 
if only a single copy of a state is available. Instead, we will construct a single protocol which 
merges all shares at once. 
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III. CONDITIONS FOR MERGING MANY PARTIES 



Let's try to construct an LOCC operation A™ : C M C M BB M ->■ C M B M BB M that when 
applied to the state ■^p±Ci...c m B ^ achieve merging, and destroy all existing correlations 

between the senders' shares C\ , C2 , . . . , C m at the same time. It can be seen as a three step process: 



First, each sender Q applies a quantum instrument Xj := {£^}f =l to his share of the state 
1jjC1C2---Cm.BR <j>^"_ This will yield both quantum and classical outputs. Each operator £ l - 
for the instrument is completely positive, and maps the space to the subspace Cj. 

Secondly, the senders C±, C2, ■ ■ ■ , C m send their classical outputs J := (ji, j 2 , . . . ,3m) to the 
decoder B. 

Finally, the decoder will use his side information ip B , his share of the maximally entangled 



M 



states ' }, and the classical information J to perform a decoding operation Vj : BB 
B 1 m BBm (i-e a trace-preserving completely positive map (TP-CPM)) and recover the state 

^pCiC2---C m BR ^ (j)L 

The state of the systems C M B° M BRX after steps 1 and 2 are performed can be written as: 

^ M B° M BRX . = £ [(id B M BR ^ ^ty,^-^** <S> K )] C m B °m BR I J)(J| X 

J-=3\h — 'jm ^ 

= J2pjtPj 1mB ° mBR ®\J)(J\ x , 



C u • ■ 

where £ j := £1 . . . £™ and ^ j m±Jm±jji i s the normalized state given by (id^ J 
£j)(i(; ClC2 --- CrnBR $- K "). The system X is an ancillary system held by the receiver which contains 
the classical outputs of the instruments Xi,X2, . . . ,X m . If we restrict the operators £j to consist of 
only one Kraus operator (i.e £){p) = A l jp(Afi for all i,j) and to satisfy ^j{A 1 ^ A 1 - = I Ci , the out- 

B® BR 

come states M } are pure and are the result of performing m incomplete measurements, 

one for each sender Cj. 

After the senders have finished performing their instruments, we would ideally like for the 
state ip j M to be in the product form 

1 ( 7 ) 

= r m 

where r c i is the maximally mixed state of dimension Lj = d c i on the space C\. Suppose, for 

the moment, that this property is satisfied for all {^j M }■ Then, the state ipj M M purifies 
t c m (g) ip R f with purification systems B M B. Another purification of t c m ip R is also given by $ L 
^b m br ^ w ]- iere the s tate tp B M BR corresponds to the original state ^CiC2---C m BR w jth the system Bm 
substituted for Cm- It follows from the Schmidt decomposition that these two purifications are 
related by an isometry Uj : B° M B — > B m BBm on Bob's side such that 

(I C M R Uj)^j 1mB ^ BR (I C 'm R [/j)t = $ Ll . . . ^ BmBR , 

= $ L ^ BmBR . 
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Hence, if the senders can perfectly decouple their systems CmC\ { from the reference, their "R- 
entanglement" will be transferred to Bob's location. Furthermore, by applying Uj, the receiver 
will recover the original state and distill some pure bipartite entanglement. 

The previous scenario was ideal, and in general, will not be feasible for most states 
1 pCiC2--.c m BR_ fj enc6/ we re l a x our decoupling requirement and accept that the measurements 
performed by the senders will perturb the reference ip R up to some tolerable amount, and that 
a small dose of correlations between the senders' shares might still be present. In more formal 
terms, we have 



Proposition 4 (Compare to Proposition 4 of |4]) Let ip 



be defined as in eq. ©, with reduced 



density matrix i()j M . Define the following quantity: 



C\C2---C m BR 



K\ 



j 



R 



(9) 



,ChB°BR 



where pj is the probability of obtaining the state ijjj M M after all the senders have performed their 
instruments. If Qx(ip Gl 2 mBR ® & K ) < e, then there exists an LOCC operation A™ which is an 
m-party state merging protocol for the state ^ c ^---C m BR w ^ n errar and entanglement cost E = 
(log K\ - log Li, log K 2 - log L 2 , . . . , log K m - log L m ). 

r~i 

Proof The proof of the above statement is very similar to the proof of Proposition 4 in [4]. We 
give the full proof here for completeness. Using Lemma l2il (see Appendix |A)| , we have 



(10) 



By Ulhmann's theorem, we know there exist an isometry (i.e. a decoding) U j : R%B — > B\jBBm 
implementable by Bob such that 



F{ifj ilR ,T C M 



ip R ) = f[{I c m r ® Uj)iPj hBhBH (I c M R ® Uj)\ $ L ® v 

Thus, using the concavity of F (see JiJ for a proof) in its first argument, we have 

F($ c m b \* b " br , $ L ® ^ b mBR^ 



tC\,R 



<PM B M BR (TC\ r R 



Bm BR 



(11) 



>Y,pjF[{i c1iR ®u.jWj 



CmB° m br !tCLr 



{i c m r ®Ujf ,® L ® i) Bu 



BnrBR 



(12) 



> 1 - -, 

2' 



where 



^Clf B\ 4 BB M R 



= (id B ® A^)^c 2 ...c m BR ^ 

■■= Ew(^ fiJ ® uj)mm c i* B °M BR {ici* R ® uj)^ 



(13) 



is the output state of the protocol. Using the relation between fidelity and trace distance once 
more, we arrive at 



?P c m b m bb mR 



BmBR, 



^ <g> tp 



< 2 v / e-e 2 /4 < 2yfe. 



(14) 
□ 
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IV. ONE-SHOT MERGING BY RANDOM MEASUREMENTS 



One possible strategy for decoupling the system Cj from the reference R and the other sys- 
tems {Cj : j / i} is to perform a random von Neumann measurement on C, with iVj = |_"7~"J 
projectors of rank L ir and a little remainder, followed by a unitary Ui mapping the outcome 

state to a subspace C\ of CiCf. For such measurements, we can bound the quantum error 

Q x (^CiC2...C m BR (g, as f ii ows: 

Proposition 5 (One-Shot Multiparty Merging) Let ^ c ' lC ' 2 -C m BR ^ e a multipartite state, with local 
dimensions dB,d R and dd, 1 < i < m, and let & K be some additional pure entanglement, as defined 
in the previous sections, shared between the receiver and the senders. For each sender Ci, there exists an 

instrument Jj consisting of Ni 



CP maps 



Li 

£}{p) := Fjp(Ptf 



1 < 3 < N h 



(15) 



where P- : Ci — > C\ is a partial isometry of rank Li (i.e. (P % -)^P l - is a projector onto an Li dimensional 
subspace of CO, and one map £q(p) := Pqp(Pq)^, where Pq is of rank L[ = dc t Ki — NiLi < Li, such that 
the overall quantum error Q x {^f^ c ^--- C ^ BR ® is bounded by 



C 1 C 2 ...C m BR , 



& K ) < 2 



e n 

TC{l,2,...,m}ieT 
T0 



d Ci Ki 



+ 2 


E 


,m} i&T 




=■■ Ax 




rc{i,2,.. 






\ 


r^0 









(16) 



and there is a merging protocol with error at most 2y/Az. In fact, for each sender Ci, if we perform a random 
von Neumann measurement on Ci followed by a unitary U mapping the outcome state to a subspace C\, 
the left hand side of eq. (fl6l ) is bounded from above on average by the right hand side. 



To prove this proposition, we will need the following technical lemma, which generalizes 
Lemma 6 in J3] to the case of m senders. The proof will follow a similar line of reasoning. 

Lemma 6 (Compare to Lemma 6 in 14]) For each sender Ci, let Pi : Ci — >■ C\ be a random partial 
isometry of rank Li. One way to construct such an isometry is to fix some rank Li-projector Qi onto a 
subspace C\ of Ci and precede it with a Haar distributed unitary U{ on Ci (i.e Pi := QiUi). Define the 
subnormalized density matrix 



u c m r {U) := (QiUx ® Q 2 U 2 ® . . . ® Q m U m ® W^CQiE/i 
where U := U\ ® U 2 ® . . . ® U m . Then, we have 



Q2U2 



Q m u m ®i R y, (17) 



U(Ci) JV(C 2 ) 



V(C m ) 



uj c m r {u)- 



L r<i 



dc A 



R 



dU< — 

1 d c M 



d R E 




{^RT)2 


rc{i,2,... 


,m} iGT 











where dU := d\J\d\J 2 ■ ■ ■ dU m , f dUi = 1 and L := Y\ { Li 



(18) 
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Proof For the remainder of this proof, we will write f f(U)dU as K[f(U)], indicating expectation, 
and abbreviate uj c m r (U) by u c m r . We have 



E 



2- 


= E 




2- 







2n 



E 



Tr[(^fl ) 2i 



Tr 



(19) 



To evaluate the average of Tr[(o; 



, we use the following property: 



Tv[(uj c m r ) 2 ] = Tr( (oj u m u ® u} u 'm h ')(F u m u 'm ®F hk ) ), 



pits' • 



(20) 



where F c m c m ■= &f[Li F G l c 'i is a tensor product of swap operators 
F c i c l := Qi ® QiF CiC 'iQi® Qi exchanging the system C\ and a copied version C- 1 . The 
expectation of Ti[(ljj c m r ) 2 ] then becomes equal to 



E 



Tr[(uA*) 2 ] 
= E 



E 



Tr ( (oj°m r (g) u c 'm r '){F c m c 'm <g> F RR ') 



Tr( (C/ Cm ® C/ c , Iw)(^ Cm/? 8> V^X^C* ® tfo, ® W^"^ ® F RR ') 



Trl (^^^ 8) ^ c 'm r ')E 



(21) 



where we have used the shorthand f7c M := f^i 8) C/2 <8> • • ■ U m , with t/j being a Haar dis- 
tributed unitary on Cj. The unitary [T^/ is identical to {Tew Du t ac * s on C' M . Observe that 
the projections {Qi} from the state oj c m r are absorbed by the swap operators {F c i c * } (i.e 

F c i c ? = Qi® QiF c l c ?Qi <g> Qi). The expectation E 

then be expanded as 



(Uc M 8 tf C ' ) t F c « c «(C/c M ® ^c; 



can 



E 



{U Cm ®U c , )t(F c M)(C/ ( 



(g)E 

i=i 



{Uf 2 yF c * c ?Uf 



(22) 



where we have used the shorthand C/f 



C/j. Each of the expected values 



E {Uf 2 yF c l c ?Uf 2 
Appendix B of 0], as 



can be re-expressed, using an argumentation similar to the one found in 



E 



{U® 2 yF c * c ?Uf 



^iI c ^ + Si F c ^, 



(23) 



where the coefficients rj and Sj are defined as 

Li dc l — Li 



< 



L; 



d Ci d 2 - 1 d 2 . ' 



Ci 



_ L 2 dg-1 < (U 



(24) 



d. 
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Substituting eqs. $22$, (23) and (24]) into eq. (ZD, we get 



E 



Tr(w 



C^2 



Tr 



Ll c ^ + s t F c ^) ® F RR ' 
i=i ^ ' 



E H r H sTr 

TC{l,2,...,m} t^T ieT 



(■</• 



.RT\2 



(25) 



where T appearing in ip RT denotes the system ®i^q-Ci. When T is the empty set, the last 
expression in eq. ((25)) reduces to Il^Li riTr[(ip R ) 2 ]. From eq. (24)), we can bound the quantity 
]1™ i r i Tr[(V' /? ) 2 ] from above by: 



Y[r t Tt[^ R ) 2 ] < — Tr[(^) 2 ] 



Tr 



^-(r C M) 2 ®(^) 2 



Cm 



Tr 
Tr 



d c M 
E[oj c1 m r } 2 



T C M <g> 1p R 



(26) 



Hence, using eqs. (16), (20), (21) and the previous bound, we have 



E 



L 



■T C M <g) lfj R 



< 



Li t r (it 



e n^n 



L i d 2 r 

rc{i,2,..,m} t^r Gi «er °* 

T0 



-Tr 



(27) 



To obtain a bound on E 



CL-R L_ T C M (g, 



, we use the Cauchy-Schwarz inequality: 



E 



(jJ C M R 



dc f 



- T C M (g) r^R 



U! M 



d c K 



TC{l,2,..,m} j^T Ci i&T °i 

r^0 



■Tr 



(V 



RT\2 



d 



e 



C M TC{l,2,...,m}ieT 

r^0 



(V^ r ) 2 



(28) 



And thus, 



E 



co c m r 



L 

dc u 



-T C M (g> 1p R 



< 



L 

dc u 



dn E 


n^ Tr 




rc{i,2,.. 






7V0 





(29) 



□ 



d 0i Ki 



Proof of Proposition^ Fix a random measurement by choosing, for each sender Ci, Ni := |_— f— 
fixed orthogonal subspaces of CjC? of dimension Lj and one of dimension L\ = d^Ki—NiLi < Li 
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The projectors onto these subspaces followed by a fixed unitary mapping it to C\, we denote by 
Q\, j = 0, iVj. Note that Q® projects onto a subspace of dimension L\ < Li. Set P- := Q\Ui with 
a Haar distributed random unitary U% on CjCf . Applying Lemma [6] for a measurement outcome 



</ = (jl,32, • • • ,im)/ With LOj 



C\,R 



(QfU^QfU: 



Q%U m <g) Ir)^ R ® T°m(Q^U 



Qfu 2 



E 



QrnU m <g> Ir)\ we have 



iVi Ar 2 

EE 



E 



jl = lj2 = l jm = l 



J 



T C M (g) ip R 



< 



i=l 



d C M K 



*« e n 

TC{l,2,...,m}ieT 
T^0 



-TV 



(30) 



< 




n 








rc{i,2,... 


,m} iST 






r^0 









Ql ft Ql ft 1 Ql ft 

Taking the normalisation into account, with pj = Tr(u)j M ) and ipj M = ^jWj M , we need to 



■Cm* 



show that on average, the pj are close to ^ — j^. Looking at eq. ((30|) and tracing out, we get 



E 



N! N 2 N m 

EE-E 

L il = lj2 = l jm = l 



Pj 



d c M K 



< 



dR 



La 



e 



rc{l,2,...,m}ieT 

r^0 



(31) 



Hence we obtain, using the triangle inequality, 



E 



Ni N 2 



Nr. 



EE-Ew 

jl=li2 = l jm = l 



< 2 



Li 



in 



e ng^ 



TC{l,2,...,m} ieT 

r^0 



(^/?r )2 



=: r 



(32) 



Lastly, we need to consider what happens when at least one sender i obtains a measurement 
outcome ji equal to 0. For an outcome J = ■ ■ ■ ,j m ), define the subset T(J) Q {1, 2, ...to} 

such that i € T( J) iff j« = 0. Also, define the set Z = { J : \T{J)\ > 0}. Then, it is easy to show 
that the cardinality of the set Z is 



i*i= e n« 

TC{l,2,...,m}i£T 

r^0 



(33) 



CLR 



For an outcome JeZ, the expected probability of the state ujj M is given by 



E, 



UiU 2 ...U„ 



.)' 



Tr 
Tr 



E UlU2 ... Um (^ R ) 



6T(J) ^T(J) 

riier(j) L i n 



(34) 



U$T{J) Li 



dc M K 
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With this formula in hand and the fact that the trace norm between two states is at most 2, we can 
bound the expected value of the quantum error Q x (^p^ c ^-- C ^ BR <g> as follows: 



E 



Ni N 2 N m 

jl =0.72=0 Jm=0 



^ M - T M <g> V 



<9 v rw^iw^ , r 



< 



< 



TC{l,2,...,m} 

> e n 

TC{l,2,...,m} ieT 

^ e n 

TC{l,2,...,m} ieT 

r^0 



+ r. 



Li 



(35) 



□ 



V. MULTIPARTY STATE MERGING: I.I.D VERSION 

In this section, we analyze the case where the parties have at their disposal arbitrarily many 
copies of the state ip ClC2 — Cm.BR yj e g^ ve a p roo f Q f Theorem |3l and then look at the case of 
distributed compression as an application. As mentioned earlier, the rates characterized by eq. $5$ 
will be achievable without the need for a time-sharing strategy. Indeed, we will show the existence 
of multiparty merging protocols where each sender performs a single measurement on his share 
of the input state and communicates the outcome to the receiver. If the parties were to employ a 
time-sharing strategy, on the other hand, the many initial copies of the input state ip c iG 2 ...C m BR 
would need to be divided into blocks, and for each of these blocks, the senders would have to 
perform a different measurement. 

A. Proof of Theorem^] 



Proof To prove the direct statement of the theorem, we use Proposition [5] in combination with 
Shumacher compression [Hfl. For n copies of the state ip c i c 2-C m BR^ CO nsider the Schumacher 
compressed state 



|fi> := (U § (g)U di (g)U 



L C 2 



(8>n 



(36) 



and its normalized version I\f0 



y/(n\n) 



|0). Here, the systems B, C±, . . . , C m , R are the typical 



subspaces (see [5] for detailed definitions) of B n , Cf, . . . , C,™ , R n and Fig, Tig , ■ ■ ■ , , 11^, are 
the projection operators onto these typical subspaces. In particular, we have that 



(n\n) 



I'Sn 



n 



B 



n 



Ci 



n 



C 7J 



n 



Hi 



\ (gin 



> 1 



(37) 



for any e > and large enough n. Furthermore, we can set e to be equal to (m + 2)exp(— c5 2 n) for 
some constant c, where 5 > is a typicality parameter. This follows from the fact (see Appendix|B]) 
that 



n 



U R >U § + U (5i + ... + U cfm +U k -(m+ l)I Bdl ...c m R (38) 
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and, that by typicality, we have Tr^fllg), Tr(^f n IIp), Tr(i/;% n U d .) > 1 - exp(-c<5 2 n) for all 
1 < i < m (see [25] for the exponential bounds). Note that we have omitted some identity 
operator factors on the right hand side for the sake of clarity. The operator fig on the right hand 
side of eq. <(38j) is in fact (7 mK ® Ilg), and the same applies for all the other projectors on that side 
of the inequality. 

The properties for the typical projectors IIg, 11^ , . . . , Uq allow us to tightly bound the vari- 
ous dimensions and purities appearing in Proposition [5] by appropriate "entropic" formulas. In 
particular, we have |5J] for any system F = d, B, R: 



(1 - e )2 n ( 5 ( F ^~ 5 ) < TV [lip] < 2 n( > s( - F ^ +s ) 
Tr[(^ F ) 2 ] < 2- n{s{F) ^- &) . 



(39) 



Hence, all parties follow a merging protocol as if they had VP, with additional entanglement 
Q K := & Kl (g> & K2 ® . . . Cg) $> Km . If each sender C\ performs a random measurement on his system, 
as in Proposition^ with projectors of rank Li (and one of rank L\ < Li) such that 



L 



nil < 2 n (S(RT) il -S(R) il -38\T\) 
Ki ~ 



(40) 



holds for all nonempty subsets T C {1,2,..., to}, then the expected value of the quantum error 
Qxi^ <£> 3> A ) is bounded from above by 



L; 



dr< Ki 
TC{l,2,...,m}ieT c i 

r^0 



+ 2 


*k E 


n 


Li 


(*Rf) 2 




rc{i,2,... 






\ 


t>0 









< 2 



< 2 



E 

(1,2,... 

E 



2 n(S(RTU~S(R) i ,-Y; teT S(C % ), p -26\T\) 



TC{l,2,..,m} 

r^0 



(1 



+ 2 



E 



2-nS 



rc{l,2,...,m} 

r^0 



2 -2n5|T| 



TC{l,2,...,m} 

r^0 



(l 



)\r\ 



-n5/2\ 



(41) 



To bound the first term on the right hand side of eq. (|4Tb , we have used subadditivity twice: 
S(RT)ip < S(R)j/j + S(T)ip and S(T)^p < J2i^r S{Ci)^. Hence, by Proposition!!! we can conclude 
that there exists a merging protocol with error 0(2- n <V 4 ) and entanglement cost E := (log K x - 
log L i , log K% — log L-i , . . . , log K m — log L m ) . From eq. (|40|) , the entanglement rate ^ 1? must satisfy 



V -(logKi - log ^) > {SiR)^ - S(RTU + 35\T\) 
= SiTlTB)^ + 3J|T| 



(42) 



for all non empty subsets T Q {1,2,..., to}. Since we have a vanishing error for this protocol as 
n goes to infinity, all rate-tuples ~ll satisfying the preceding set of inequalities are achievable for 
merging for the state ^ . However, by the gentle measurement lemma and the triangle inequality, 



(V 



Ci_C 2 -C m BR\®n 



(43) 
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S(C 2 \Ci)ip S{C 2 )^ ^2 

FIG. 2: The rate region for distributed compression (m = 2) when the conditional entropies S(C\\C2)ip and 
S(C2\Ci)ip are both positives. For the point (R\, R%) on the boundary, time-sharing is needed if we perform 
two applications of the original state merging protocol. Our protocol, on the other hand, can achieve this 
rate without the need for time-sharing. 



and so, if we apply the same merging protocol on the state ^jjGi^—CmBR^n ^ ^ we g e j. an 
error of 0(2" n5 / 4 ) + 0{2- cn82 / 2 ). This error also vanishes as n goes to infinity, and since 5 was 
arbitrarily chosen, we can conclude that any rate-tuple it = i?2, • • • , R m ) satisfying 

^Ri>S(T\TB)Tp (44) 

for all non empty T C {1, 2, . . . , m} must be contained in the rate region. This proves the direct 
part of Theorem|3l 

The converse was established in J3] so we are done. 

□ 



B. Distributed compression for two senders 



To illustrate some of the properties of our protocol, let's consider the problem of distributed 
compression for two senders sharing a state ip c ^ c ^ R i with purifying system R. The objective is the 
same as in state merging, except that the decoder has no prior information about the state. Quan- 
tum communication will be achieved using pre-shared EPR pairs and classical communication. 
The decoder will recover the original state by applying an appropriate decoding operation. Pure 
entanglement, shared between the decoder and the involved senders, might also be distilled in 
the process. If we let R t denote the net amount of entanglement consumed (or generated if Ri is 
negative) in a distributed compression scheme, it was found in |Q] that the rates must obey 

Ri > S{Ci\C*)i, 

R2 > S(C 2 \d)^ (45) 
R1+R2 >S(CiC 2 V 
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Observe that this is just a special case of eq. (JUJ) with m = 2 and Bob having no side infor- 
mation. Figure |2] shows the achievable rate region when the conditional entropies have positive 
values. 

One way to perform distributed compression is to apply the original state merging protocol as 
many times as needed, adjusting the amount of pre-shared entanglement required depending on 
the information the decoder has after each application of the protocol. For instance, if we wish to 
first transfer C\'s share to Bob, we can apply the state merging protocol using an entanglement 
rate of S(Ci)^, which amounts to Schumacher compressing the state ip Cl since the receiver has 
no prior information about the state tp 1 2R . Then, to transfer C2 r s share of the state, we perform 
another state merging, this time, with an entanglement rate of S(C2\C\)^. This will correspond to 
one specific corner of the boundary in Figure |2l Transferring C2 first, and then C\ will give us the 
other corner. To attain all other points on the boundary using this approach, time-sharing will be 
required. 

The techniques used to prove Theorem |3l however, demonstrated that time sharing is not 
essential to the task of multiparty state merging. Let [R\ , -R2) be any point in the rate region. Then, 
R\ and R2 must satisfy eq. <|45) , and so by Theorem |3l the rate-tuple (R\,R2) is achievable for 
multiparty merging for the state ip ClC2R . That is, given a large number of copies of ij) ClC2R , there 
exist multiparty state merging protocols A 2 ^ of vanishing error and entanglement rate ^ (log Kf — 
log L™, log K% — log LV; ) approaching R\ and R2 respectively. In the proof of Theorem[3j we have 
shown the existence of merging protocols of a specific kind. For these protocols, each sender 
performs a single measurement with projectors of rank Li (and one of rank L' { < Li) on his share 
(CiCf)® n . The amount of pre-shared entanglement required and the rank of the projectors will 
need to satisfy eq. ((40|) . The receiver will then apply a decoding Uj once he receives the outcome 
of the measurements. These protocols do not partition the input state (^iC^-R^n j. Q ac hieve the 
desired rates (R\ , R2). Hence, time-sharing is not required and the parties can perform merging at 
any rate (R±, R2) lying in the rate region if they were supplied with enough initial entanglement. 



VI. MIN-ENTROPIES AND ONE-SHOT MERGING 



A. Review of Min- and Max-Entropies 



Quantum min- and max-entropies are adaptations of the classical Renyi entropies of order a 
when a — > 00 and a = 1/2 respectively. The Renyi entropies were introduced by Renyi [26[| in 
1961 as alternatives to the Shannon entropy as measures of information. Although introduced 
in an operational way, the Shannon entropy can also be regarded as the unique function which 
satisfies a set of prescribed postulates. Renyi showed that by generalizing some of the postulates, 
other information-theoretic quantities could be obtained, and this gave rise to the family of Renyi 
entropies, parameterized by a positive number a. Renyi entropies and their quantum generaliza- 
tions have found applications in areas such as cryptography |2a 128( 1 and statistics 123, |30]. For 
our purposes, only the definitions and some basic properties of the min- and max- entropies will 
actually be needed. 

Let S<(AR) be the set of sub-normalized density operators (i.e Tr(p AR ) < 1) on the space AR. 
The quantum min-entropy (l^j of an operator p AR £ S< (AR) relative to a density operator a R is 
given by 

H min (p AR \a R ) :=-logA, (46) 
where A is the minimum real number such that A(I <S> a R ) — p AR is positive semidefinite. The 
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conditional min-entropy H m - m (p AR \R) is obtained by maximizing the previous quantity over all 
density operators a R : 

H min (p AR \R) := sup# min (/ R |0. (47) 
For two sub-normalized states p and p, we define the purified distance between p and p as 



P(p,p):=Jl-F(p,p)i, (48) 



where F(p, p) is the generalized fidelity between p and p (see [18] for the definition). It is related 
to the trace distance D(p, p) := ~||p — p\\i as follows 



D(p, p) < P(p, p) < 2 V / D(p,p). (49) 



A proof of this fact can be found in Lemma 6 of [180 . (Lemma 6 actually relates the purified 
distance to the generalized distance D(p, p). However, D(p, p) is always greater than or equal to 
the trace distance and bounded above by ||p — p\\\.) 

Using the purified distance as our measure of closeness, we obtain a family of smooth min- 
entropies {-f^ini D Y optimizing over all sub-normalized density operators close to p AB with re- 
spect to P(p, p): 

# min (P AR \R) '■= SUP H min (p AR \R), (50) 
pAR 

where the supremum is taken over all p AR such that P(p AR , p AR ) < e. If we use the trace distance 
instead as our measure of closeness, we obtain the family {H^ iri }'- 

H^{P AR \R) ■= sup H min (p AR \R), (51) 

pAR 

where the supremum is taken over all sub-normalized p AR such that D(p AR , p AR ) < e. From 
eq. (|49) , the smooth min-entropy H^ in can be bounded by in the following way: 

H £ mi n(p AR \R) < H^ n (p AR \R) < Hlt(p AR \R). (52) 

Given a purification p ABR of p AR , with purifying system B, the family of smooth max entropies 
{-^maxl is defined as 

H^ x (p AB \B) := -H^ a {p AR \R) (53) 
for any e > 0. The smooth max-entropies can also be expressed as 

H^(p AB \B) = inf H m UP AB \B), (54) 

pAU 

where the infimum is taken over all p AB such that P(p, p) < e. We refer to Jl8l ] for a proof of this 
fact. When e = 0, an alternative expression for the max-entropy H m&x (ip AB \B) was obtained in 



131]: 



H max (p AB \B) = suplogF 2 (p AB ,I A ®a B ), (55) 
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where the supremum is taken over all density operators a B on the space B. From this last ex- 
pression, the smooth max-entropy H^ l&yi {p A ) of a sub-normalized operator p A G S<(A) reduces 
to 

^max(/) = 21og^v / ^, (56) 

x 

where f x are the eigenvalues of the sub-normalized density operator p A which optimizes the right 
hand side of eq. d54l) . 

When defining the smooth min- and max-entropies using the purified distance, other useful 
properties such as quantum data processing inequalities and concavity of the max-entropy are 
also known to hold. A detailed analysis of these properties can be found in 

We will also need, for technical reasons, another entropic quantity called the conditional colli- 
sion entropy H2(p AB \a B )[18]. It is defined as 



2n 

AB I R 



H 2 {p AB \a B ) :=-logTr 



((Ii®a B 1/4 )/ B (lA^ B 1/4 ) 



(57) 



It is a quantum adaptation of the classical conditional collision entropy. We have the following 
lemma relating the min-entropy to the collision entropy: 



Lemma 7 jm] For density operators p AB and a B with suppjTr^/r 4 - 8 )} C suppler- 8 }, we have 

H min (p AB W B ) < H 2 (p AB \a B ). 

The last two results we will need are the additivity of the min-entropy and the following 
lemma which relates the trace norm of an hermitian operator S to its Hilbert-Schmidt norm, with 
respect to a positive semidefinite operator a: 

Lemma 8 Let S be an hermitian operator acting on some space X and a be a positive semidefinite operator 
on X. Then, we have 

||S||i < VTH^Wa-^Sa^h. (58) 

Lemma 9 (Additivity) Let p AB and p A ' B ' be sub-normalized operators on the spaces AB and A'B' re- 
spectively. For density operators a B and a B , we have 

H min (p AB ® P A ' B '\° B ® O = H^ a (p AB \a B ) + H min (p A ' B '\a B '). (59) 

For proofs of the preceding two lemmas, see [16]. 



B. Characterizing the entanglement cost of merging using min-entropies 

In (l6], Berta showed that the smooth min-entropy is the information theoretic measure which 
quantifies the minimal amount of entanglement necessary for performing state merging when a 
single copy of ^ ABR is available. More specifically, he proved that the minimal entanglement cost 
log K — log L necessary for merging the A part of a state ^ ABR to the location of the B system is 
bounded from below by 

log if - logL > S^ AR \R), (60) 
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Furthermore, he demonstrated the existence of a state merging protocol using an entanglement 
cost 1 of 



log K - log L = -H^ AR \R) + 4 log ( ^ ) + 12. 



(61) 



This last result was derived by re-expressing the upper bound to the quantum error (Lemma 6 of 
J3]) as a function of the smooth min-entropy. 

In this section, we would like to generalize the main results of to the case of multiple 
parties sharing a state ^dCa - CmSR Q ur resu i t - ls a reformulation of Lemma in terms of 
min-entropies: 

Lemma 10 (Compare to Lemma 4.5 of For each sender Ci, let Pi : Ci — )■ C\ be a projector onto a 
subspace C\ of Ci and U{ be a unitary on the space Ci. Define the state 



u°m r ■= (P 1 U 1 ®P 2 U 2 



P m U m <g> W Cl c 2 ...c m R(PiUi <8> P 2 U 2 



P m U m ®I R ) ] - (62) 



If the unitaries U\,U 2 , . . . , U m are distributed according to the Haar measure, then for any state a R of the 
system R, we have 



E 



UJ C M R 



L 

d c A , 



T C M (g> 1p' 



< 



L 



i 



2-(^ m inW' ri V fl K 1 °s i T), 



(63) 



TC{l,2,...,m} 

r^0 



where L T = flier L i- 

Proof Using Lemma we have, for any state a R of R, 



Co' 



< VL 



(/°M ( g)( (J «)-4)(a; Af' 



<.R\<tC 



d c A 



(64) 



Define 



w c «« : = (P 1 [7 1 0P 2 f7 2 



Then, the right hand side of eq. (|64"|) can be rewritten as yL 
eq. (|27)) in the proof of Lemma [6[ we have 



F'mt/m ® Ir)$ CmR {PiU x <g> FW 2 ® • • • ® F m F m (8) / fl )t. 



OjCifR _ l_ t c m (g, ^ 



(65) 



Using 



E 



£j C m r 



L 



-f M ® ^ 



< 



Tc{i,2,...,m} ieT Ci «eT C ' 

r^0 



< 



Cm TC{l,2,....m} 

r^0 



(66) 



TR\2 



1 The numbers K, L are natural numbers, and so we must choose values for K and L such that log A'— log L is minimal, 
but greater or equal than the right hand side of eq. | |6TV 
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The quantity Tr[(^ 7 " R ) 2 ] can be rewritten as 

Tt[{^ TR ) 2 ) = Tr 



Ti t ($ CmR ] 



Tr 



{I T ®{a H )-i){^ IH ){l' ®(a H )-i) 



TR\(tT 



(67) 



= 2 -H2(.M> TR W R ) 

where H2(ip' ! ~ R \<J R ) is the conditional collision entropy of ilP~ R relative to a R . Combining eqs. 
and |(6Zl) together, and using the fact that H min (tp TR \a R ) < H 2 {'4> tr \<t r ), we get 



E 



UJ C M R 



L 



■T C M (g> 1p 



R 



< 



< 



L 

d c M 

L 

d c M 



E L r2 



TC{l,2,...,m} 

r+% 



^ 2-( H ^n(^ TR W R )-\ogL T ), 



TC{l,2,...,m} 

r^0 



(68) 



□ 



With this result in hand, we are now ready to give an adaptation of Lemma 4.6 in fl6l ] for our 
general multiparty setting. 

Theorem 11 (Compare to Proposition 4.7 of Let ij } c i c 2---C m ,BR ]j ean y (jn+2)-partite pure state 
and fix e > 0. Then, for any entanglement cost E = (\ogK\ — log L\, log K 2 — logL2, . . . ,\ogK m — 
\ogL m ) satisfying 

\ogK T - \ogL T := ^(logJQ - logL 4 ) > -H min {^ TR \^ R ) + 4 log ( ~ J + 2m + 8 ( 69 ) 

/or aZZ non-empty subsets T C {1, 2, . . . , to}, f/zere ex/sis a sfafe merging protocol acting on ^ c ^ c 2---C,„br 
with error e. The set T is defined as the complement ofT. 

Proof We proceed by fixing a random measurement for each sender d as in Proposition^ We can 
describe C/s random measurement using iVj := [ dc ^ Kl j partial isometries P{ = Q\Ui, where Ui is 

a Haar distributed random unitary acting on the system CiCf and Q\ is as defined in Proposition 
[5] If ddKi > NiLi, there is an additional partial isometry Pf of rank L\ := d^Ki — NiLi < Li. 
Applying the previous lemma to the state u % t Ki <X> t Kz (g> . . . <g) r Km , with a R = ip R , we get 



E 



EE-E 

il=lj2=l jm = l 



CL-R i 



< 



R 



nr=i ^ 

dc M K 



2-( H ^(^ TR \^ R )+^gK T -lo g L T ) 
TC{l,2...,m} ( 70 ) 

r^0 



< 



^ 2~( H n 1 inW rii IV' ii )+logii'r-logLr) ) 



TC{l,2,..,m} 
T^0 
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where K j = flier ^ i • Note that to get the first inequality, we have used the fact that H rD ^(tf rR i 
T K r\^R) = H min (4> T V) + logK T . 

Using eq. l|69l), we can simplify the previous inequality and obtain 



E 



Ni N 2 

EE- E 

ii=ij2=i im=i 



< 



^2 2-( H ^(^ TR \^ R )+ lo sK T -logL T ) 



TC{l,2,...,m} 

r^0 



(71) 



e 2 e 2 

< IF < — • 

- 2 ™±8 - 



Taking normalisation into account, withpj = Tr(wj M ) and tjjj 
the left hand side of the previous set of inequalities, and get 



CbRs , ,C\.R i CLR 

= —lo j , we can trace out 

pj J 



E 



N„ 



Ni N 2 

EE-E 

ii=lja=l Jm=l 



~ 16 



(72) 



By applying the triangle inequality, we obtain 



E 



JVi ^2 



EE-Ew 

il=lj2 = l im = l 



r m ® ^ 



< 



(73) 



Using this, and eq. (|35)) in the proof of Proposition^ we can get an upper bound to the quantum 
error Q x (ip c i c 2- C ™BR ^ $Ky 



E 



Ni N 2 



N„ 



EE- Ew 

jl=0j2=0 jm=0 



^ B - T C « (8) 4> R 



£ 2 E n 

TC{l,2,...,m} ieT 

r^0 



I, 



E EE-E 



< 



E 



TC{l,2,...,m} 



< 



E 



2 e 42^minW Tii ^ ii ) £ 2 

2 2m + 8 d Cr + ¥ 

2 e 42^min(^ T ) £ 2 



(74) 



2 2m + 8 d, 



rc{l,2,...,m} 

e 4 e 2 e 2 

< ~ H < — 

- 2 m+r 8 ~ 4 

To get the third inequality, we have used the strong subadditivity of the min-entropy ||18| 

The last line follows from the fact that H m i n (^ T ) = — log A max (^ r ) < log dc T - From Proposition 
|H we can conclude there exists a state merging protocol acting on ^C\C 2 ...c m BR error e. □ 

When m = 1, the previous result yields a merging protocol of error e and entanglement cost 
log K — log L = —H m i n (tp ClR \tj} R )+Alog (|) + 10. Berta [16] showed however that the min-entropy 
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H m in{ip ClR \ip R ) of the state ip ClR relative to ip R can be replaced by the min-entropy H m i n (ifj ClR \R) 
of ip ClR relative to R. This yields a smaller entanglement cost, and we can ask whether the right 
hand side of eq. (J69)) can be replaced by a formula involving min-entropies of this form when 
m > 1. To allow this to work, we would need a more general version of Lemma ITUl where eq. ((63]) 
is replaced by 



E 



U C M R 



L 

d c A , 



■T C M (g> ljj R 



< 



L 

dCu 



rc{l,2,..,m} 

r^0 



-(^minW rii k^)- 



;Lt) 



(75) 



and this inequality holds for 2 m — 1 possibly different states a R . Using this stronger form, we 
could set a% = of, with H min (ip TR \a R -) = H min (^ TR \R) and bound the left hand side of eq. ||75) 
by setting log Kj — log Lj > —H ra \ n (ip TR \R) + 4 log (|) + 2m + 8. However, it is unclear if such a 
stronger form of Lemma ITUl can be obtained. 

Berta Jl6[| also showed that the previous result can be further improved when m = 1 by 
smoothing the min entropy H m i D (i{) ClR \R) around sub-normalized operators ^ ClR which are e- 
close in the trace distance to the state ip ClR . It is also unclear if eq. ((63]) in Lemma Hoi can be 
strengthened to 



E 



UJ C M R 



dc 



L T C M (g> 1p R 



< 



L 

dc. 



2~( h ^ tr W r )-^l t ) j 



(76) 



TC{l,2,...,m} 

r^0 



for any fixed e > 0. 



Conjecture 12 Let ^ c i c 2-C m BR ^ e m (i m +2)-partite state. For any e > 0, there exists a multiparty state 
merging of error e whenever the entanglement cost E := (log K\ — log L\, log K 2 — log L^, . . . , log K m — 
log L m ) satisfies 



log K r - log L r := £(log X< - log Lj) > -H^ TR \R) + 0(log 1/e) + 0(m) (77) 
for all non-empty subsets T C {1, 2, . . . , m}. 

The main difficulty in proving the conjecture is that it allows independent smoothing of each of 
the min-entropies. It is straightforward to modify our proof to allow smoothing using a common 
state for all the min-entropies, but the monolithic nature of the protocol does not naturally permit 
tailoring the smoothing state term-by-term. We can, however, give a partial characterization of 
the entanglement cost in terms of smooth min-entropies if we apply the single-shot state merging 
protocol of [la] on one sender at a time. 

Proposition 13 For a (m + 2)-partite pure state x(; ClC2 - CmBR / fix an e > and let n : {1, 2, . . . , m) — > 
{1, 2, ... , m} be any ordering of the m-senders C±, C2, ■ ■ ■ , C m . Then, for any entanglement cost E := 
(log Ki - log Li , log K 2 - log L 2 , . . . , log K m - log L m ) satisfying 



log Ki- log U > -m 



Y(i(} CiR *-Hi)\R^_ li{) ) +41og (™) +12 foralll<i<m, (78) 



where Ri := R^) 1 J l =i+1 C 7T ^ / there exists a multiparty state merging protocol acting on the state 
^CiC2...c m BR w ^ n error e 
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Proof Our multiparty state merging protocol for the state < l jpiC%...C m BR consists of sending 
each sender's share to the receiver one at a time according to the ordering -k: The sender C^m 
will merge his part of the state first, followed by C^m\, C^m, etc. We can view the input state 
^ ) c 1 c 2 ...c m BR ag a tripartite pure state %jj "W fll , with the reference system R\ being composed of 
the systems C 7r ( 2 )C 7 r(3) • • • C n ( m \R. According to Berta [16], there exists a state merging protocol of 
error e/m and entanglement cost 



mm 

2 



log K[ - log Li := -H^i^W^Rt) + 41og(-) + 12 



e / 



< -^^(^ (1)Rl |^i) + 41og(y) +12 

< log if i - logLi, 

which will produce an output state p W W satisfying 



(79) 



< 



m 



(80) 



where the system is substituted for the system C n m. After C^n) has merged his share, the 
next sender C^m) wu 1 perform a random measurement on his share of the state and send the 
measurement outcome to the receiver. Suppose, for the moment, that the parties share the state 
ip B TM BRl (gj $ L i instead of the output state p\. The state ^ B ^w BRl can be viewed as a tripartite 
state ^ c t(2)- b 2«2 / witri B<2 ._ s^^B and #2 := C 7r( 3)C 7r ( 4 ) . . . C nijn) R. Using Berta's result once 
more, we know there exists a state merging protocol of error e/m and entanglement cost 



\ogK' 2 - logL 2 = -H*£? 0j c ^ r * 



R;>) + llog(-) +12 



< _ZJ~64m 
— min 



(ip°*m R2 \R 2 ) +4 log 
< log #2 - logL 2 , 



+ 12 



(81) 



which produces an output state p 2 ' r(2) ' r(2) 

c 
P2 



B - K [2)B 2 R 2 



satisfying 



e 

< -, 

m 



(82) 



where the system B w (2) is substituted for the system C n r 2 y If we apply the same protocol on the 

c lm B la) B ^W BRl 

state pi instead, we get an output state ps which satisfies 

p Cl W Cl {2) Bi {1) Bl {2)B<2) B^R 2 _ ^ Bw(1)B ^ 2)B r 2 ^ $il ^ 



< ||P3 " P2||l + \\P2 ~ IP B "W B "(V BR2 

< \\pi - ip B <D BR i (g) q&h + \\p2 - 



L 2 \ 



- l p^ 7T ^B^^BR 2 



^2 1 



(83) 



2e 

< -, 
m 



where we have used the triangle inequality and monotonicity of the trace distance under quantum 
operations. The analysis for the other senders C n r 3 \ , C 7r ( 4 ) , . . . , C^i m \ can be performed in a similar 

way, which leads to a multiparty state merging protocol of error e and entanglement cost ~E := 
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FIG. 3: Entanglement cost for multiparty merging in the one-shot regime when m = 2. The axes correspond 
to the entanglement cost E\ := \ogK\ — logLi and Ei := \0gK2 — log £2- For m = 2, we have two 
permutations of the set {1,2}, and according Proposition [T"3l two intersecting regions (circles and crosses) 
where existence of a 2-party state merging of error e can be shown. 



(log K\ — log L\ , log K2 — log L2, . . . , log K m — log L m ) satisfying eq. (f78)> . The final output state p ri 
satisfies 



< e. 



(84) 

□ 



Figure |3] depicts the boundaries of the regions described by Theorem [TTJ Conjecture [12] and 
Proposition [131 Note that the hatched area is not part of the cost region described by Proposi- 
tionETJJ 



VII. A WORKED EXAMPLE 



The proof of Theorem[TT]is significantly more complicated than that of Proposition[l3l To illus- 
trate the benefits accruing from the additional effort, we will compare the two results' estimates 
of the costs achievable for merging C\ and C2 to R for states of the form 



d 

^^|j) Cl |^) C2 |j) R , (85) 



where = Y^j=i 1 /J. ^ s TIi e <ith harmonic number. These are close relatives of the embezzling 



states introduced in [32], which are useful resources for channel simulation and other tasks fl!9l, 
33 , 3^1 . They make interesting examples because they have sufficient variation in their Schmidt 
coefficients that the i.i.d. state merging rates of Theorem [3] are not achievable in the one-shot 
regime. Nonetheless, our results yield nontrivial one-shot rates that are significantly better than 
simple teleportation. We will assume that | (ipi\ipj) \ < a for i ^ j and try to and express the rates in 
terms of a. We will assume for convenience that a > since, when a = 0, the costs are essentially 
the same as when a = Q(l/d). 
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Protocols from Theorem [TT] 



Let (E\,E2) be a pair of entanglement costs achievable according to Theorem ITT1 The only 
constraints on the costs (aside from needing to be the logs of integers) are 

Ei > -iW^ Cl V) + 41og(l/e) + 12 (86) 
E 2 > -F min (V C2i? |^) + 41og(l/e) + 12 (87) 
El +E 2 > -F min ^ ClC2fl |^ R ) + 41og(l/e) + 12. (88) 

To begin, we will find a sufficient condition for the E\ constraint to be satisfied, so we need to 
evaluate ff min (V' C ' lfi |^ fi ). Let A be the smallest real number such that X(I Cl <g) ip R ) - ifj ClR > 0. 
Expanding the operators, that condition is the same as 

E^i^^^^-EE^i^o^i 01 ^!^) >o, (89) 

where 5{j is the Kronecker delta function. By the Gershgorin Circle Theorem f35l.l36l |, the operator 
will be positive semidefinite if each diagonal entry dominates the sum of the absolute values of 
the off-diagonal entries in the corresponding row. That condition reduces to 



A-l . ^ 1 



> (90) 



holding for all i, which is true provided A — 1 >a^]L \/d/j- But 



d \ r d \ — 

V — < / — dx = 2-Sd. 

^v7"7o v^ 



(91) 



Therefore, the operator of eq. (j89~|) will be positive semidefinite if A > 2ad+ 1. This in turn implies 
that 

- tfnnn^V) < log(2ad + 1) < log(ad) + 2. (92) 

The lower bound of eq. (|86)l will therefore be satisfied provided E\ > log (ad) +4 log (1/ e) + 14. The 
interpretation is that if the states { | tftj ) } are indistinguishable, then C% holds the whole purification 
of R and must therefore be responsible for the full cost of merging. As the states {IV^)} become 
more distinguishable, the purification of R becomes shared between C\ and C 2 , so the merging 
cost can be shared. Indeed, if a = 0(1/ d), then the lower bound on E\ becomes a constant, 
independent of the size of the input state \ ifj) ClC2R . 

Moving on to the E 2 constraint, eq. (|87) , a similar but easier calculation shows that 
-f^min(V ;C ' 2 ' R |V ;fi ) = 0. For the sum rate E\ + E 2 , it is necessary to evaluate H min (ip ClC2R \il} R ). 
Since the rank of ^ ClC2 is d, this entropy is at least — log d fl^] . 

So any pair of costs (Ei,E 2 ) satisfying 

Ei > log(ad) + 41og(l/e) + 14 (93) 
E 2 > 41og(l/e) + 12 (94) 
E Y + E 2 > logd + 41og(l/e) + 12 (95) 

will be achievable by Theorem [TTJ The total cost E\ + E 2 must be at least log d plus terms inde- 
pendent of the size of \^) ClC2R and that cost can be shared between E\ and E 2 . The lower bound 
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on Ei alone is independent of d and should be regarded as a small "overhead" for the protocol. 
There is a minimal d-dependent cost for E\, however, which encodes the fact that if C2 does not 
carry enough of the purification of R by virtue of the nonorthogonality of the {|^/)}, then more 
of the burden will fall to C\. 



A. Protocols from Froposition[l3l 

Now let us consider the costs achievable according to Proposition [13] For fixed e, the proposi- 
tion provides two cost pairs, plus others that are simply degraded versions of those two arising 
from the wasteful consumption of unnecessary entanglement. Proposition[l3]does not permit in- 
terpolation between the two points, as compared to Theorem [TT1 It might be the case, however, 
that Proposition [I3]s freedom to smooth the entropy and vary the operator being conditioned 
upon could result in those two cost pairs being much better than any of those provided by Theo- 
rem [TT] On the contrary, for the states of the example, the improvement achieved with the extra 
freedom is minimal. 

Let {E^E'2) be a cost pair achievable by Proposition [13] For the purposes of illustration, con- 
sider the point with the smallest possible value of E' 2 . Letting 5 = e 2 /256, that point will satisfy 



E[ > -H s min (^ R \C 2 R) + 4log(2/e) + 12 
E' 2 > -H s min (^ R \R) + Alog(2/e) + l2. 



(96) 
(97) 



Since the state ip 2 is separable, the cost E 2 cannot be negative, at least for sufficiently small e, so 
the key number is the E[ cost. Before introducing the extra complication of smoothing, consider 
first H m - m (^ ClC2R \CiR) . By [31], this is related to the largest overlap that can be achieved with 
a maximally entangled state on C2/C1R by acting with a quantum channel on the C\R part of 
7 pC 1 c 2 R_ Thig maximum singlet fraction is at least what is achieved by just aligning the Schmidt 
bases, which is 



1 1 



1 Vj ■ H d \fd 



1 



> 



d-H d 
1 

d-H d 
4 



1 



dx 



1 Vx 



H d V \Vd 



> 



log cT 



(98) 

(99) 
(100) 
(101) 



where the last line holds for sufficiently large d. Above and in what follows, we use the inequality 
ln(d+l) <H d < (In d) + l, which was supplemented above by the fact that 4/ (In d+1) > 5.7/ log d 
for sufficiently large d. According to Theorem 2 of [3l|], the resulting bound on H m ; n is 



- H min (^ c * R \RC 2 ) > log d - log log d + 2. 
Therefore, ignoring smoothing, the sum cost for Proposition [13] will always satisfy 



E[ + E' 2 > log (i - log log (i+ 26 + 8 log H^j , 



(102) 



(103) 
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for sufficiently large d, which has worse constants and even asymptotically only differs from the 
sum cost ((95|) for TheoremlTTlby 0(log log d). 

Now let us introduce some smoothing. By duality of the min- and max- entropies, 

- H s min (^ R \RC 2 ) = #L x (V> Cl ). (104) 
Lemma 1251 of Appendix ICl gives that 



< ax (^ C ' 1 )>21ogmm^ 




k— 1 ^ d - 

V ; : k such that V — < — \ . (105) 



Getting a lower bound on this expression requires finding large k that nonetheless fail to satisfy 
the tail condition. That restriction on k is equivalent to 1 — Hk/Hd < 5 2 /2, which will not be met 
by any k small enough to obey 

k < (d+ l) 1-<52 / 2 /e (106) 

for sufficiently large d. Using a similar estimate as for the maximum singlet fraction calculation, 
we get 

^HG*)) (io8 » 

> log k — log log d + log 5 (109) 

for sufficiently large k. Substituting in the largest possible k consistent with eq. (|106[) and 5 = 
e 2 /256 gives 

E[ + E' 2 > (l - log(d + 1) - log log d + 24 + 8 log f^j , (110) 

for sufficiently large d. The sum costs achievable using Theorem [TTI compare favorably with this 
bound. The additional savings from smoothing are only about e 4 log(<i + 1)/512 ebits, which is 
insignificant for small e. These tiny savings also come at the expense of being able to interpolate 
between achievable costs. To be fair, these states were chosen specifically because they are known 
to maintain their essential character even after smoothing, as was observed in ffll] . The freedom 
to smooth is certainly more beneficial for some other classes of states, most notably i.i.d. states. 
Indeed, since S(ip ClC2 ) = (logd)/2 + O(loglogd), merging many copies of \ifj) ClC ' 2R can be done 
at a rate roughly half the cost required for one-shot merging. 



VIII. A VARIANT OF MERGING: SPLIT TRANSFER 



In the previous sections, we've analyzed and characterized the entanglement cost for merg- 
ing the state ^d^—CmBR ^ Q a g^gjg reC eiver Bob in the asymptotic setting and in the one-shot 
regime. Here, we modify our initial setup by introducing a second decoder A (Alice), who is spa- 
tially separated from Bob and also has side information about the input state. That is, the helpers 
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Ci, C2, ■ ■ ■ , C m and the two receivers Alice and Bob share a global state ip c i c 2—C m ABR anc j ^ e 
jective is then to redistribute the state ip c i c 2—C m ABR ^ Q Alice, Bob, and the reference R. The mo- 
tivation for this problem comes from the multipartite entanglement of assistance problem yL |4j], 
where the task is to distill entanglement in the form of EPR pairs from a (m + 2)-partite pure state 
/l pCiC2...c m AB ghaj-g^ between two recipients (Alice and Bob) and m other helpers CV, C2, . . . , C m . 
If many copies of the input state are available, the optimal EPR rate was shown in [J] to be equal 
to 

E ooy,c 1 C2...c m AB) .- m i nr s(AT)^, (111) 

where T C {C%, C2, . . . , C m } is a subset (i.e a bipartite cut) of the helpers. We denote the comple- 
ment by T := {C1C2 ■ ■ ■ C m } \ T . We call miwj-{S(AT)^} the minimum cut (min-cut) entangle- 
ment of the state ^AC 2 ...CmAB _ 

The proof that the rate given by eq. (11111 ) is achievable using LOCC operations consists of 
showing that the min-cut entanglement of the state ^p\Ci—C m AB ^ g p reS erved, up to an arbitrarily 
small variation, after each sender has finished performing a random measurement on his system. 
The procedure described in the proof of [4] makes use of a multiple-blocking strategy. That is, 
given n copies of the input state <^px c i—C m AB ^ ^ e first helper will perform d = n/m random mea- 
surements, each acting on m copies of •^p\Ci—C m AB anc j g enerat ing J possible outcomes. Then, if 
each measurement can yield outcomes ji , j'2 , • • • , 3d, we need to group together the residual states 
corresponding to outcome 1, then group the ones corresponding to outcome 2, etc... When this 
is done, the next helper will perform random measurements for each of these groups in the same 
way the first sender proceeded. That is, for each group, you need to divide into blocks, and so on. 
Needless to say, this approach fails in the one-shot setting. 

It was conjectured in [4] that these layers of blocking could be removed by letting all the helpers 
perform simultaneous measurements on their respective typical subspaces. Such a strategy would 
still produce states which preserve the min-cut entanglement, thereby providing a way to prove 
eq. (|111|) without the need for a recursive argument. We will show in the remainder of this section 
that for a cut Tmm which minimizes S(AT)^, there exists an LOCC protocol acting on the state 
■ l pC 1 C2...c m BR which w qi S end T m - m to Alice and its complement to Bob. The protocol will consist 
of two parts. First, all the helpers will perform measurements on their typical subspaces and 
broadcast their outcomes to both decoders. Then, Alice will use the classical information coming 
from the helpers which are part of the cut T mm and apply an isometry U, while Bob will apply an 
isometry V depending on the outcomes of the helpers belonging to T mm . This will redistribute 
the initial state to Alice, Bob, and the reference R. Standard distillation protocols [3§L |39Q on the 
recovered state will yield EPR pairs at a rate given by eq. (|111|) . 

Definition 14 Let ifp~TABR ^ e m ^ m _|_ 2)-partite state, where T and T are a partition of the helpers 
Ci, C2, ■ ■ ■ , C m - Furthermore, assume that the helpers and the decoders share maximally entangled states 
$ K : = (g)- gT & Ki and T M := <g) ie Y^ Mi on the tensor product spaces T°A^- and T°B^. 

We call the LOCC operation M : TT^TT® <g> AA\ <g> BB^ -»■ T l A\AA T ® T 1 B^BB T a split 
transfer of the state ^TTABR w ^ error e an ^ associated entanglement costs E^(ip) := 0,- g7 -(logi<Q — 
logL,) and E^(ip) := ©.^(logM; - log ty) if 



(idfl ® M){^ TTABR ®<5> K ® T M ) - ^aa t bb^r ®$ L ®T N 



< e, (H2) 

1 



where <& L := <S) ie j- $ Li , T N := ®jeT T N i, with the states $ Li and Y Ni being maximally entangled 
states of Schmidt ranks Li and iVj on C\A\ and CjBj respectively. Also, the systems Aj- and B^ are 
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ancillary systems of the same size as T and T and are held by Alice and Bob respectively. For the state 
\& ■= ^jpTABRy»n ^ fog entanglement rates RrbP) an d Rf(4>) are defined as ^E^^) and ^£U=(^). 

In the above definition, we have denoted by - e7 -(log Ki — log LA a vector of length \T\ whose 
components are given by log Ki — log Li for i S Tin the lexicographical order. 

The rate region where a split-transfer can be accomplished by LOCC can be defined in a man- 
ner analogous to definition [2] We omit the details here, but whenever we will say that a rate is 
achievable for a split-transfer of the state ijP~TABR^ y. W1 vj mean that it is contained in the rate 
region. 

Now, we'd like to specify conditions, as in Proposition [H that the initial state should satisfy in 
order to allow the group T (resp. T) to transfer their share of the state to Alice (resp. Bob). For a 
pure state ip T ' TABR , suppose all the helpers perform incomplete measurements (as in Section HIT)) 
on their respective shares of the state. For measurement outcomes J := (ji,j2, ■ ■ ■ ,jm)> define the 
state 



\^T T1ABR ) :=^{Pl®Pf 2 ®...®PZ® I ABR )\^ TrABR ) 
{P] T ®Pj T ®I ABR )H TTABR ), 



Pj 
1 



(113) 



where pj is the probability of getting outcome J. In the above definition, jj- is a vector of length 
| T\ whose components correspond to outcomes of measurements performed by the helpers be- 
longing to the cut T . The vector jj* is defined similarly. Finally, the Kraus operators Pj = 

<S>ieT Pji anc ^ Pj- = ®ieT ma P tne s P aces 7~ an d T to the subspaces T 1 and T 1 respectively. 

Define another state \<p£. rABR ) := -±=(Pj T ® iTabr^ttabr^ wriere is t h e probability 

of getting the outcome jf, and suppose that we have 

ip TWBR = T T^^TBR^ (n4) 

where tJ^ = <S> ie j- T C i is the maximally mixed state of dimension L on the system T 1 . From the 
Schmidt decomposition, we know there exists an isometry U A T : A — > Alj-A-jA which Alice can 
perform such that 

(I rlTBR ® Uf T )\<p£ TABR ) = |$ L ) ® |V^ TAB/? >, (115) 

where the state \i/j a tTABR^ j g ^ e same as the original state \ijP~TABR^ with the ancillary system 
Aj- substituted for T . The state |<3? L ) is a maximally entangled state on T 1 Alj-. 

Finally, define the state \v A f T1ABR ) := -^L=(pT ® I At abr)\'4> AtTABR ) and suppose again 
that we have 

v A f lAR = T J 1 ®^ AR , (116) 

where r^ 1 = (& ie j° t c * is the maximally mixed state of dimension N on the system T 1 . Applying 
the Schmidt decomposition once more, Bob can perform an isometry : B — > B^B^B such 
that 

{I A T T^AR ^ yB ) \ v AfnABR ) = ^ ^A T B T ABR^ (n7) 
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where the state \ip A r B T ABR ) is the same as the original state ifj TTABR with the ancillary systems 
Af and Bj= substituted for T and T. 

If we apply the isometries U A T and to the outcome state \ipj 1 T 1 abr^ resulting state is 
given by 

(i rlTTR ®u a ® v 3 B _)\rt llflABR ) 

' (I TlTlR U A V*)(PT ^ I T1ABR ){PT fTABR^TTAB^ 



pj - 3T ^ 3—>^ 3~ >^ 3T 

l _^A^A T T^AR V B)( P T g, jT 1 Alj-A-rABR^jT 1 BR ^ U A )(pT $ jTABR ) ^TTABR ) 



^_ {I T^ T A T T^R ^ ^B )(p T ® jT 1 Alj-ArABR^jT 1 BR ^ ^^-^T AB R) 



Vjt^A^AtT^AR q V B^pT g, jT^V^rAB/J^L^ g |^AA r TB^ 



PJ 

(118) 

Since the states (J^T 1 * ® [/£ <g) V B _)\^ T1ABR ) and |$ L ) |r^) <g> |^^tB t bR) are both normal- 
ized, we must have = pj T pj—. Hence, in this ideal case, we can achieve a split transfer of the 
state ^ c i c 2-CmBR by letting all the helpers measure their share simultaneously. The decoding by 
Alice and Bob will follow once they receive the measurement outcomes. 

Proposition 15 (Conditions for a Split-Transfer) Denote the state shared between m helpers and two 
receivers (Alice and Bob) by ^TTABR^ w ^ p Ur ijyi n g system R. Suppose all the helpers perform incom- 
plete measurements on their share of the state ip TTABR as in the previous paragraphs, yielding a state 
\ipJ 1TlABR ) := -^j{Pj T ® Pj T ® I ABR ){\if TABR )) for an outcome J := (j 1} j 2 , ■ ■ -,jm) with proba- 
bility pj, where the Kraus operators Pj T and Pj_ map the spaces T and T to the subspaces T 1 and T 1 . 

If, for the quantum errors Q\(^ TTABR ) and Q^(ifj TTABR ), we have 

Q\(^ TABR ) ■= EPirWrt™ ~ rV ^™||! < e 

3T 

Q^ TTABR ) :=£pM< r ^*-^^ ArA *ll^ e '> (U9) 

then there exists a split-transfer of the state ^TTABR with error l^fl + 2\/e 7 and entanglement costs 
Ej- = iGT (-logLj) and Ej= = ie ^=(- log TVj). The states <pJ^ TBR and v A Z T AR are reduced 
density operators for the states \^ Tabr ) := ^=(P[ T ® I™ R )\^™ R ) and \o^ ABR ) ■= 

^ [pj_ g iA T ABR^A T TABRy 

Proof Since the quantum errors Q\ and Q\ are bounded from above by e and e' respectively, 
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Proposition|4]can be applied, which tells us of the existence of isometries C/y and V^_ such that 



^ PiT (/ A r^ g V £ )lv ATTiABR ){v ArTiABR l{I A T AR ^ yiy _ ^A T B-ABR ^ ^ 



J- 



< 2^1 

< 2v / e 7 . 

(120) 



If we apply the isometries U A T and V? to the state \ifjJ 1 ' 1 ~ 1ABR } after obtaining outcome J, the 
output state p of the protocol will be of the form 



^R 



uf T ® v£)^r r ^ M (i riri * ® c// r ® ^ 



E P J ( ( J ® ® J ) ( J ® ) I * 



T X T ABR\ i „T X T ABR 



JT 



)(<P 



JT 



\(i®ufJ(Pl®i)Hi®v*? 



3T> 



IT 



3-> 



- £(I ® ® i)C(^ ® J) f (/ ® ^ 

=: X(C) 



(121) 



where ( := Ej r Pjr( J ® ^y)lv^ TASfl )(^ TAB ' R |(- f ® f7y) t . It can be seen as the output state 
we would get if only the helpers in T wanted to transfer their share of the state to the decoder 
A. The map M., as defined above, corresponds to an LOCC quantum operation acting on £ which 
consists of measurements by the helpers in T followed by an isometry on B. Note that we have 
remove some of the superscript notation for the sake of clarity. 

We would like to bound the trace distance between the output state p and the state i/j AtB t abr ® 
& L ® T N . To achieve this, we introduce the following intermediate state 



a : = V?)(PT. ® I){vb A r™ R ® $ L ){pT_ ® j)t(j g, vg)t 

= A^(^ ArTABi? ®$ L ) 



(122) 



and apply the triangle inequality 



p _^ T B-ABR ®$L^ T N 


< 


p-a 


+ 




1 




l 



a — tp 



A T B T ABR $ L pTV 



(123) 



The trace norm 



<T - ^A T B T ABR 



iV 



is equal to the trace norm appearing in the second 



line of eq. 01201 ), and so is bounded from above by 2\/e. To bound 

M(Q - M{i/j AtTabr ® $ L 



a 



, we have 



< 



c _ ipAfT ABR g $ L 



(124) 



< 2y^. 
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The first inequality holds since the trace distance is non-increasing under quantum operations, 
and the second inequality is just the first part of eq. (|120[) . Thus, we have a split-transfer of the 
state ^CiC 2 ...c m ABR with error 2 ^ + 2y/7. □ 

With this result in hand, a one-shot split-transfer protocol of the state tpLTABR w ]- iere a \\ 
helpers perform simultaneous random measurements on their share can be obtained by two in- 
dependent applications of Proposition [5] followed by an application of Proposition [I5j We state 
the result here. 

Proposition 16 (One-Shot Split-Transfer) Let i/jTTABr ^ e an ^ m _|_ 2)-partite pure state, with purify- 
ing system R and local dimensions d,A, dB,dn. Furthermore, let d-j := H^fdci and dj- '■= Tl^da be 
the dimensions of the systems T and T. Finally, allow the helpers to share additional maximally entangled 
states <& K and T M with the decoders. 

For each party Ci in the cut T, there exists an instrument Zi = {£]}jl consisting of Fi = [ dc ^ 1 j 
partial isometries of rank Li and one of rank L\ = dc t K~i — FiLi < Li such that the overall quantum error 
Q-(ip TTABR <8> $ K ) is bounded by 



TTABR 



$ K ) < 2 



y TT-^ 

Z.^ 11 ( { n Ki 

s^m 



+ 2 



i 



d T d B d R y II JT Tt 

SeTieS 1 
S^% 



STBR\2 



A 



(125) 



Similarly, for each helper Ci in the cut T, there exists an instrument X, = {£j}jl consisting of 



G 



d Ci Mi 



jj— j partial isometries of rank Ni and one of rank N- 
overall quantum error Qj(ifj TTABR <g> T M ) is bounded by 



da Mi - dNi < Ni such that the 



Q 



l^TTABR 



® r M ) < 2 



scries d cM 
s^ffi 



+ 2 



i 



N; 



d AT d A dR H j^-Tr 



S^9 



A 2 

Ax - (126) 



Then, there exists a split-transfer of the state ^TTabr w ^ errar 2^J^- + 2yJ Aj. The left hand sides 
ofeqs. (I325l > and U26t are bounded from above on average by their right hand sides if we perform random 
measurements on all the helpers according to the Haar measure. 

Proof The bound on the quantum errors Q- and Q\ given by eqs. (|125[) and (|126|) can be obtained 
by two independent applications of Proposition|5]to our setting. We leave the details to the reader. 

The existence of a split-transfer with error 2^/a^ + 2yJ A| will then follow from Proposition 

[TBI Note here that since the helpers have additional entanglement at their disposal, the partial 

isometries Pj T and Pj_ in Proposition [15] are replaced by P]^j and PjJ° ■ These will act on the 

spaces TT° and TT° respectively, with output spaces corresponding to T 1 and T 1 . □ 

Similarly, for the i. i. d. version, we can treat each quantum error independently and follow a 
line of reasoning similar to that in Section [VD We arrive at a variation on Theorem [3j 

Theorem 17 (m-Party Split-Transfer) Let ^LTABR ^ e a p Ur {fi ec i s i a i e which is shared between m 
helpers and two receivers (Alice and Bob), with purifying system R. For all non-empty subsets X C T 
and y C T, define X and y as the tensor products ® ieX Ci and &) ie y Ci. Then, the rates Rt(4>) '■= 
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ie7 -(i?i) and i?7=(V0 := 0j 6 7=(-^O flre achievable for a split-transfer of %lP~ TABR iff the following in- 
equalities 

J2Ri >S{X\XA)^ (127) 

i&X 

Y,Ri>s(y\yB)i, (128) 

hold for all non-empty subsets X (1 T and y Cf. Tfoe systems X and y are defined as the complements 
of X and y with respect to the systems T and T respectively. 

Proof To prove achievability, we can proceed exactly as in the proof of Theorem |3l That is, we 
Schumacher compress the state (jjfTTABR^&n ^ anc j ^ eri p er f orm random measurements on the 
helpers with the following bounds on the ranks of the projectors and of the pre-shared entangle- 
ment: 

< h. < 2 n ( s( - xTBR h-s(TBR) i ,-38\x\) ^ 129 j 

< Yl — < 2 n ( s ( yTAR ^- s{TAR ^- 3S W (130) 

for all non empty subsets X C T and y C T. The bounds on the quantum errors Q\ and Q\ 
given in Proposition [16] can then be made arbitrarily small. That is, we will have Q\ and Q\ 
bounded from above by 0(2~ n5 / 2 ) for some typicality parameter 5. By applying Proposition 
we get a split-transfer of the state ipTTABR w i t h error 0(2~ n<5 / 4 ) and entanglement costs E-j-(i/j) 
0,. er (log Ki - log Li) and E^if,) = ieT (log M, - log Ni). These will satisfy 



J" -(log Ki- log LJ >S(X\X A) + 36\X\ 

teX _ (131) 

V-(iogMi-iogJVi) > s(y\yB) + 35\y\ 



for all non-empty subsets X C T and 3^ C T. An application of the gentle measurement 
lemma and the triangle inequality then tell us that we can apply the same protocol on the state 
^TTABR^n and obtain a split-transfer with error 0{2~ nS / A ) + 0(2~ cn52 / 2 ). Since this error goes to 
zero as n tends to infinity and 5 was arbitrarily chosen, we get back the direct part of the statement 
of the theorem. 

To get the converse, we can consider any cut X of the helpers in T and look at the preservation 
of the entanglement across the cut AX vs XBTR. We assume, for technical reasons, that Lj < 
2°( n ) for all i G T. The initial entropy of entanglement across the cut AX vs XBTR is 

E in := nS(AX) f + log K t . (132) 

iex 

At the end of any LOCC operation on the state (^fTTABRym ^ ^ e out p Ut state can be seen as 
an ensemble {a*. , ih k , _l . } of pure states. Using monotonicity of the entropy of 

lH ' ^^Alj-A^AVj-T B^B n B^R"' r b J fJ 

entanglement under LOCC, we have 

nS(AX)^ + Ki > qkS^A^A^ , (133) 

iex k 
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where X := <S) ie x C i- For 

any LOCC operation performing a split-transfer of the state 

(TjjTTABR^n with error £/ we have 



(134) 



This follows from the definition of a split-transfer (eq. ( 11121 )) and the fact that F 2 is linear when 
one argument is pure. Using Lemma |2T1 we can rewrite this as 



^T^A-A^ T'B^BILR" ^AA T BB T R ® $ L ® F 



< 2v/e(l-e/2). (135) 



By monotonicity of the trace norm under partial tracing, we get 



2fc 



X A\-A n Aj- 



<2v/e(l-e/2). 



(136) 



^11^®^®®^ 

Using the Fannes inequality (Lemma |22|) and the concavity of the //-function, we have 

]T q k S(X J A\A n AVf)^ - log U - nS(AXX)^ < (2 ^ log U + n log d A + n log d j4r )»/(2 y^O" 



< 0(n)77(2Ve(l-e/2)). 



Finally using eq. dl32| ), we have 

V-aog^-logLi) > 5(^1^)^ - 0(l)» 7 (2 N /e(l - e/2)) 



for any non empty subset X C 7". Using a similar argumentation, we can show that 

- (log ^ - logJVi) > S(y\yB) f - 0(1)7/(2^(1-6/2)) 



(137) 



(138) 



(139) 



holds for any non empty subset 3^ C T. By letting n — > oo and e — > 0, we get the converse. □ 

If only a single copy of ipTTABR ^ g available to the involved parties, we can adapt the argument 
of Theorem [TT] and prove the following result concerning the existence of split-transfer protocols 
with error e: 

Proposition 18 Given a partition T C {1, 2, ... , m} of the helpers C\, C2, . . . , C m , let ^pTTABR ^ e a 
(m+3)-partite pure state and fix e\, €2 > 0. Then, for any entanglement cost Ej- = ig7 -(logi^j— logLj) 
and Etj= = 0,- g ^=(logMj — logiVj) satisfying 

\ogK s - \ogL s := ^(logKi - logL,) > -i7 min (V/™|V™) + 4 log (1 ) + 2|T| + 8 



ie5 



logAfc/ - log L^, := V (log Mi - bgJV<) > -iW^^I^^) + 41og ( j_ ) + 2 |T| + 8 
its' W 

(140) 

/or flZZ non-empty subsets S C T and S' C 7", ^ere exz'sts a split-transfer protocol acting on ^p~T ABR with 
error e± + e 2 . 
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Proof The proof is very similar to the proof of Theorem [TTJ First, we fix random measurements 
for each helper C, in a manner analogous to Proposition |5l For each helper Q in T , we have Fi = 
[ dc ^ Kt j random partial isometries QjUi of rank Li, where is defined as in Proposition|5]and U{ 
is a random Haar unitary on CiCf. If i^L, < dc^Ki, we also have a partial isometry of rank L\ < 
Li. Similarly for each helper Cj in T, we have Gi = [ dc fa Iz J random partial isometries Q*?7j of 
rank and one of rank N[ if GjiVj < dcJ^-%- For a measurement outcome J := (ji , j'2 , • • • ,j m ),let 
J7- = 0j e7 -ii be the vector of length t = |T| whose components correspond to the measurement 
outcomes for the helpers belonging to the cut T. The i-th element of Jj- will be denoted by jV,i- 
Define 



, ,T X TBR 



{Q T jU t ® I TBR )ip 



TTBR ln T 



{Q'jUt 



(141) 



where Qj := ^l^-j-Qji an d the shorthand Uj- denotes the tensor product &) ie -j-Ui. If we apply 
Lemma ITUl to the state i\) TR> (g> t k , where t k := ® igr t k * and := T (8) 5 <g> R, we get 



E 



F x F 2 

E E 

ir,i =1 Jr,2=i 
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ir,i 



< 



n, 



er 



FiLi 



d Cr K 



5^0 



- min ( i> SR ' I ) +log " log L S ) 



(142) 



< 



5^0 



(H min (i>SR' |^«')+log K s -log L S ) 



where K s = U ie s K i- 

Using the hypothesis that log K s -\ogL s > -H min {il) SR ' \tp R ') +41og (j^j +2|T| + 8, we can 
proceed in a manner analogous to the proof of Theorem [TT] and get the following bound on the 
expectation of the quantum error Q\{ily TABR ® & K ): 
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Fi F 2 

E E ■ 

ir,i=Oir,2=o 



• P J T 

3T,t=0 
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SCTieS 
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rf SI 



(143) 



where £ = |T| , pj r = Ti(ufj^ TBR ) and i)jj! J TBR = ^-uiJ^ TBR . In a similar way, we can bound the 
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expected value of the quantum error Q\ as follows: 



E 



E £■■■ £ <E l^ ^ 



Jr,i =0 - 7 r,2=° jr,m-t=° 



_ 2 2 ( m -*)+ 8 d C5 , 
»I (144) 



< + — < — 



From Proposition[l5j we can conclude that there exists a split-transfer protocol of error t\ + e 2 . □ 

With these results in hand, we can now return to our initial motivation, which was that of 
proving that the min-cut entanglement of the state ^ c ^ c 2---C m AB can ^ e p reservec l by letting all the 
helpers Cx, C 2 , ■ ■ ■ , C m perform simultaneous random measurements on their typical subspaces. 
To prove this fact, we will need the following corollary to Theorem [171 

Corollary 19 For a pure state ^ C ^ c i- C ™- AB r we denote by T m i n « cut of the smallest possible size with the 
following property: 

VTC{Cx,C 2 ,...,C m }: S(AT min h < S(ATU. (145) 

Then, for the state i/jTmrnTminAB t the right hand side of eq. H27t will be negative for all nonempty sets 
X Q Tmin/ while the right hand side of eq. \12&\ will be non-positive for all nonempty sets y C T m m- 

Furthermore, if we have arbitrarily many copies of the state ^ c ^ c 2---C m AB a ^ QUY ^{ S p om \ i we can 
perform a split-transfer of the state ^dCa-.-CmAB us j n g on \y \ oca \ operations and classical communication. 

Proof For any non-empty subset X C %nin> where T m \n is not the empty set, we have 

S{X\XA),p = S(T m i n A)^ _ S{XT m ii\B)^ 

< S(XA)^ — S(XT m i n B) 1 p ... 

— — (146) 

= S(XT m - m B)^ — S(XTra\nB). l p 

= 0, 

where in the second line we have used the fact that S(ATmm),j, < S(AT) when T is a cut of size 
smaller than |7m m |- 

Similarly, for any non-empty subset y C T mm , where T mm is not the whole set 

{Cx,C 2 , C m }, we have 

s{y\yB)^ = s(T m inB)^ - s(yr miI1 A),^ 

= S{%^A)^ - S(yT min A)^ (147) 

< 

This proves the first part of the corollary. 

To get the second part, apply Theorem[l7|by setting the Schmidt ranks of the pre-shared maxi- 
mally entangled states to be Ki = 1 for alii G T and Nj = 1 for all j G T. Then, for these particular 
values, eqs. (|129l ) and 01301 ) give us bounds on the ranks Li and Mj of projectors corresponding 
to measurements performed by C L G T and Cj G T respectively. Since L{ > 1 and Mj > 1 must 
be satisfied for alH G T and j G T, we need the conditional entropies S(X\XA)^ and S(y\yB) 1 p 
appearing in the upper bounds to ILer an< ^ TljeT^i *° ^ e ne g a hve. Otherwise, the helpers 
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will not be able to perform measurements with vanishing quantum errors Q\ and Q\ and they 
will need to consume additional entanglement. 

If some of the conditional entropies S(y\yB) 1 / ) are equal to zero, we will need to inject an 
arbitrarily small amount of singlets between the cut y vs AT m i n or the cut y vs By in order to 
make S(y\yB),i, negative (i.e an EPR pair contributes -1 to the conditional entropy). However, it 
is shown in [40] that for pure states, the LOCC class of transformations is not more powerful if we 
allow an additional sublinear amount of entanglement. This is due to the fact that we can always 
generate EPR pairs between a given cut, using an o(n) amount of copies of the initial state, unless 
across that cut the state happens to be in a product state. □ 

Theorem 20 (Multipartite Entanglement of Assistance |4]) Let ^CiC 2 ...c m AB y e a s ^ e s /j am / 
tiveen m helpers and two recipients: Alice and Bob. Given many copies of i/) GlC2 - CmA - B , if we allow LOCC 
operations between the helpers and the recipients, the optimal "assisted" EPR rate is given by 

Efty, A:B) = mm T {S(ATU} (148) 



Proof Let T m i n be a cut of the smallest size attaining the minimization in eq. (|148|) and fix some 
e > 0. Then, according to Corollary [191 if n is large enough, we can perform a split-transfer 



_ A n A n B n B— 

protocol of the state ip'minTjnmAB w ^ error e. This will produce a state tp Tmin T ^ such that 



A n AV. 



AA-r ■ \®n 

'mm 



< 



A n AVj- B n B— 

in ' mln 'min 



AA T . BBrj 



< e. 



(149) 



,AAt ■ BB^j 

') ' mm / 

tuted for the systems T mm and T mm . Applying the Fannes inequality to eq. (|149|) , we get 



where ^ AAT ^™ at>7r min is the original state ^T^vTm^AB w n\y systems Af mixx and B^ . substi- 



< nlog(d A d AT )v(e) 



which implies that 



S{A n A^ m J v = n(S(AA Tm J^ ±S) = n(S(AT mm ) ± S), 



(150) 



(151) 



where 5 can be made arbitrarily small by letting e — > 0. Thus, the min-cut entanglement E^{ijj) is 
arbitrarily well preserved after the split-transfer is performed, and so Alice and Bob can distill at 

An An B n B— 

this rate by applying a standard purification protocol on ip Tmin r mm . □ 



IX. DISCUSSION 



We have studied the problem of multiparty state merging with an emphasis on how to accom- 
plish merging when the participants have access only to a single copy of a quantum state. In the 
easier asymptotic i.i.d. setting, the rate region was characterized by a set of "entropic" inequal- 
ities which any rate-tuple R2, ■ ■ ■ , R m ) must satisfy in order to be achievable for merging. 
These inequalities define a convex region S in an m-dimensional space, whose axes are the indi- 
vidual rates Ri, and where merging can be achieved if the parties have access to many copies of 
^CiC 2 ...C m BR^ Q ur p ro t oco i f or multiparty state merging distinguishes itself in that any point in 
the rate region can be achieved without the need for time-sharing. The main technical challenge 
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for showing this was to adapt the decoupling lemma of [4] and the upper bound to the quantum 
merging error (Proposition 4 in [4]) to the multiparty setting. 

The one-shot analysis of the entanglement cost necessary to perform merging presented more 
difficulties than in the asymptotic setting but as compensation yielded greater rewards. Most 
notably because time-sharing is impossible with only a single copy of a quantum state, our in- 
trinsically multiparty protocol provides the first method to interpolate between achievable costs 
in the multiparty setting. The technical challenge was to derive an upper bound on the quan- 
tum error Qx{^) for a random coding strategy in terms of the min-entropies. We suspect that it 
might possible to further improve our bound by replacing the min-entropies with their smooth 
variations, but it is unclear how to proceed in order to show this. We leave it as an open problem. 
To illustrate the advantages of intrinsic multiparty merging over iterated two-party merging, we 
also performed a detailed analysis of the costs incurred by the two strategies for variants of the 
embezzling states. 

Lastly, we have introduced the split-transfer problem, a variation on the state merging task, 
and applied it in the context of multiparty assisted distillation. The main technical difficulty here 
was to prove that the helpers in the cut T do not have to wait for the helpers in T to complete 
their merging with the decoder A before they can proceed with the transfer of their shares to the B 
decoder. The essential ingredients for showing this were the commutativity of the Kraus operators 
PJ r and Pj_, and the triangle inequality. The rate region for a split-transfer is composed of two 
sub-regions, each corresponding to rates which would be achievable for a merging operation from 
T(resp. T) to ^(resp. B) with reference TBR (resp. T AR). 

In the context of assisted distillation, the existence of a split-transfer protocol which redis- 
tributes the initial pure state ^xC^—CmAB ^ Q ^ e d ecoc l ers A anc [ £ was use d to give a non- 
recursive proof that the optimal achievable EPR rate under assistance is given by the min-cut 
entanglement mm<j-{S(AT)}. It would be interesting to come up with other potential applica- 
tions for the split-transfer protocol. State merging was used as a building block for solving various 
communication tasks, and we believe split-transfer could be useful in other multipartite scenar- 
ios than the assisted distillation context. Alternatively, it could also simplify some of the existing 
protocols which rely on multiple applications of the state merging primitive. 
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Appendix A: Miscellaneous Facts 

For an operator X, the trace norm is defined as: 

||X||i := TrVXtX, 
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and the trace distance of two states p and a is given by D(p, a) = — a\\i. An alternative 
measure of closeness of two states is given by the fidelity: 



F(p,&) := ( Tr J y/pvjp). 



If the state p := is pure, the fidelity between p and a becomes equal to: 



These two measures of closeness are related as follows: 



Lemma 21 Mil/ For states p and a, the trace distance is bounded by 

1 - F(p, a) < D(p, a) < ^/l-F 2 (p,a). 

Lemma 22 (Fannes Inequality [42]) Let p and a be states on a d-dimensional Hilbert space, with \\p — 
cr 1 1 1 < e. Then \H(p) — H(a)\ < rj(e) logd, where r](x) = x — x log x for x < -. When x > -, we set 
r](x) = x + ^jp. 

Lemma 23 (Gentle Measurement Lemma JH]) Let pbe a subnormalized state (i.e p > and Tr[p] < 
1). For any operator < X < I such that Tr[Xp] > 1 — e, we have 

< 2^~e 

l 



XpVx-p 



Appendix B: Proof of eq. (38) 

Lemma24 For n copies of a state < l p c i c 2- c ™ BR / l e t 11^,11^,11^, . . . ,ILg be the projectors onto 
the typical subspaces B, C\, C2, ■ ■ ■ , C m and R respectively. Then, we have 

U BC M R ■■= U B ® % ® • • • ® U C m ® U R > U B + % + • • • + U C m + - (m + l)I SeuR , (Bl) 

where IIg is a shorthand for TL^ <g> jCiC<2...C m R t an ^ similarly for Tig , 11^ , . . . , II^ and lip. 

Proof The projection operators involved in the proof statement pairwise commute, and thus, are 
simultaneously diagonalizable. Let {|e;)} be a common eigenbasis for these projectors. Then any 
eigenvector \e{) with Ilg^^lej) = |ej) satisfies 

If |ej) is any eigenvector with H-Bc M R\ e i) = ®' then it must be in the kernel of at least one of the 
projection operators II ^ , ILg , 11^ , . . . , IIg and 11^,, which implies that 

i m + l ) I BC M kj\ e i 

where \ < 0. Using both of these observations, we have 

U bc m R = Y \ e i)( e i\> Y \ e i)i e i\+ Ai|ej)(ei| 

n BC M il\ e ') = \ e i) n BC M R\ e i) = \ e ') n BC M R\ e ')=° (B2) 

= ^B+^C 1 +---+ U C m + U R-( m + 1 ) I BC M R 

□ 



n 5 + n<5 +... + % m + n£-(TO + iUfi*„g Ik) = A*h 
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Appendix C: Smoothing H max 

Lemma 25 Suppose the density operator p has eigenvalues r = (n, . . . , r^) zyz% r-j > rj + \. Then 

k-l d 2 



^"max(p) > 2 log min <J ^ ^/FJ : k such that ^ r,- < — } . (CI) 

j=i j=k+i 



Proof By Lemma 16 of 11811 , H^ ax (p) is equal to the minimum of H max (p) over all positive 
semidefinite operators p no more than e away from p as measured by the purified distance. This 

/ — 1 /2 

measure is a bit awkward to work with for our purposes, but it is bounded above by v 2 1 1 p — p\ | 1 / 
by eq. ((49]> . Therefore, 

^max(p) > min{tf max (p) : ||p -p\\i< (C2) 

for 5 = e 2 /2 and we will try to estimate the right hand side of the inequality. 

Let p be a positive semidefinite operator such that ||p — p\\i < 5 and let r = (f\, . . . ,fd) be 
the eigenvalues of p, ordered such that fj > ^j+i- We will identify r and r with their associated 
diagonal matrices. Then (see [24]) 

llr-rll! < ||p -p||i, (C3) 

but H mSLX (r) = H max (p) and H max (r) = -£f max (p) so we may assume without loss of generality 
that p and p are simultaneously diagonal with diagonal entries in non-increasing order. We can 
therefore dispense with p and p, discussing only r and r from now on. 

By Theorem 3 of |3ll| , H max (r) = 2 log ^ . y/f], which is monotonically decreasing in each rj. 
This implies that a minimizing r must satisfy rj > fj. If not, redefining Yj = rj decreases ||p — p||i 
and H max (r) at the same time. 

We will now argue that there is a minimizing f such that there is a jo for which rj = fj for 
all j < jo and = for all j > jo- Let s = (si, . . . , s^) be any vector such that Sj > Sj + \ > 
and Sj < rj, that is, a vector that is a possible candidate for a minimizer. Suppose that s does 
not have the prescribed form, that is, there is a jo such that Sj < rj but Sj 0+ \ / 0. Consider the 
family of vectors t(j) that arise by transferring 7 from Sj 0+ i to Sj defined by £(7)j = Sj + S, 
*(7)io+i = s io+i ~ s and *i = s j for i ^ {io,io + li- 
lt is easy to check that for sufficiently small 7, it will be the case that ||r — t(7)||i < ||r — s||x- 
Moreover, defining 7(7) = J2j \/t{l)j> we nav e that 



4f 

d-i 



1 



(C4) 



7=0 2^/s-^T' 

which is nonpositive since Sj > Sj 0+ \. For sufficiently small 7 then, H max (t(j)) < H mSLX (s). (If 
Sj = 0, the derivative does not exist but the conclusion can be confirmed by looking at finite 
differences.) So, if s were a minimizer, it is possible to either construct a new minimizer of the 
prescribed form or reach a contradiction by further decreasing H ma _ x . 

The statement of the lemma follows by evaluating H m3iX on a minimizer of the prescribed form. 

□ 
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